Security

regreSSHion: an OpenSSH server remote code execution vulnerability (CVE-2024-6387)

Leave a Comment / Ubuntu, 22.04, 24.04, Security, Server, Ubuntu 22.04, Ubuntu 24.04 / Ubuntu Server Admin / July 7, 2024 / cve, openssh

On 1 July 2024 we released a fix for the high-impact CVE-2024-6387 vulnerability, nicknamed regreSSHion, as part of the coordinated release date (CRD). Discovered and responsibly disclosed by Qualys, the unauthenticated, network-exploitable remote code execution flaw affects the OpenSSH server daemon (sshd) starting with version 8.5p1 and before 9.8p1. As for the versions distributed and supported by Ubuntu, […]

regreSSHion: an OpenSSH server remote code execution vulnerability (CVE-2024-6387) Read More »

How to Set Up SSH Keys on Ubuntu 22.04

Leave a Comment / 22.04, Security, Shell, ssh, ssh key, Tutorials, Ubuntu / Ubuntu Server Admin / May 30, 2022

Secure Shell Technology or SSH is a network communication protocol that permits two systems to securely communicate in an unsecured network. This cryptographic protocol is also utilized for command–line executables or remote login programs such as terminal applications. Users who want to use SSH for connecting to other remote systems must have SSH configured on

How to Set Up SSH Keys on Ubuntu 22.04 Read More »

How to install Snort on Ubuntu 20.04

Leave a Comment / 20.04, Security, Tutorials, Ubuntu, Ubuntu 20.04 / Ubuntu Server Admin / August 22, 2022

This article provides a guide for how to install Snort on Ubuntu 20.04 (Focal Fossa). Snort is a lightweight, open source network intrusion prevention system for running a network intrusion detection system (NIDS). Snort is used to monitor the packet data sent / received over a specific network interface. Network intrusion detection systems can intercept

How to install Snort on Ubuntu 20.04 Read More »

Ant Media Server Firewall Configuration

Leave a Comment / UFW Firewall, Firewall, Security / Ubuntu Server Admin / February 26, 2021 / ant media server

Set Ant Media Server Firewall Rules Use the following rules for Ant Media Server Firewall Configuration: 1 2 3 4 5 6 7 8 ufw allow ssh ufw allow http ufw allow https ufw allow 1935/tcp ufw allow 5080/tcp ufw allow 5443/tcp ufw allow 5000:65000/udp enable ufw After enabling, you will have following status 1

Ant Media Server Firewall Configuration Read More »

RubyGems dependency confusion attack side of things

Leave a Comment / Bundler, diffend, Ruby, rubygems, Security, Software, Ubuntu, Ubuntu Feed / Ubuntu Server Admin / February 16, 2021

Note: This article is not to deprecate any of the findings and achievements of Alex Birsan. He did great work exploiting specific vulnerabilities and patterns. It is to present the RubyGems side of the story and to reassure you. We actively work to provide a healthy and safe ecosystem for our users. After reading the

RubyGems dependency confusion attack side of things Read More »

RubyGems Bitcoin Stealing Malware postmortem

Leave a Comment / Ruby, rubygems, Security, Ubuntu, Ubuntu Feed / Ubuntu Server Admin / December 31, 2020

Introduction On the 7th and 13th of December, there were two malicious packages uploaded to RubyGems. Here’s the postmortem and analysis of the packages’ content. Diffend.io platform that I run closely cooperates with the RubyGems team, providing immediate insights into any gems that have “weird” characteristics. Thanks to that, the gems were yanked relatively fast.

RubyGems Bitcoin Stealing Malware postmortem Read More »

Diffend – OSS supply chain security and management platform for Ruby

Leave a Comment / diffend, Rails, Ruby, Security, Software, Ubuntu, Ubuntu Feed / Ubuntu Server Admin / October 13, 2020

I’m incredibly excited to announce a security platform for managing Ruby gems dependencies: diffend.io. This platform is a result of my involvement in Ruby security matters for years. It all started in early 2018 with a tool to review gems versions diffs. While working on it, I’ve noticed that there’s much more that needs to

Diffend – OSS supply chain security and management platform for Ruby Read More »

How to take over a Ruby gem and what to do with it / RubyKaigi 2019 presentation

Leave a Comment / Education, Ruby, rubygems, RubyKaigi, Security, Software, Ubuntu, Ubuntu Feed / Ubuntu Server Admin / August 2, 2020

Using Ruby gems is safe, right? We’re a nice community of friendly beings that act towards the same goal: making Ruby better. But is that true? Can we just blindly use libraries, without making sure, that they are what they are supposed to be? Learn how you can take over a gem, what you can

How to take over a Ruby gem and what to do with it / RubyKaigi 2019 presentation Read More »

Install and Configure CSF ConfigServer Firewall

Leave a Comment / Centos / RHEL, Config Stuff, csf, CSF ConfigServer Firewall, csf firewall, debian, Fedora, Firewall, Linux/nix Distros, Network, Security, Tutorials, Ubuntu, Ubuntu Feed / Ubuntu Server Admin / June 2, 2020

Install and Configure CSF ConfigServer Firewall About CSF Firewall ConfigServer Security and Firewall, also known as CSF, is an opensource software firewall application. It is working based on iptables. Firewall configuration script created to provide better security for your server while giving you an easy to use, advanced interface for managing your firewall settings. CSF configures

Install and Configure CSF ConfigServer Firewall Read More »

Protecting Apache Server From Denial-of-Service Attacks

Leave a Comment / apache, apache protect, Config Stuff, debian, dos, evasive, Linux/nix Distros, mod_evasive, Security, Tutorials, Ubuntu, Ubuntu Feed / Ubuntu Server Admin / February 15, 2020

Protecting Apache Server From Denial-of-Service Attacks Denial-of-Service (DoS) attack is an attempt to make a machine or network resource unavailable to its intended users, such as to temporarily or indefinitely interrupt or suspend services of a host connected to the Internet. A distributed denial-of-service (DDoS) is where the attack source is more than one–and often

Protecting Apache Server From Denial-of-Service Attacks Read More »