Archive for category Security

Chalie Miller is my hero

MS rant

It was sure nice hearing Steve Gibson’s rant agaisnt Windows on the latest Security Now Episode 192. The best part, and it totally made my day when he said that tools like Visual Basic .Net are designed so that monkeys could write application for Windows.
http://twit.tv/sn192

OpenSSH

Well, instead of spending Saturday night wasting my time at the mall or at that place people call movie theaters, I got a chance to play around with OpenSSH more in depth.

I use ssh to log into my server practically every single day, but I really wasn’t aware all of its actual capabilities. After looking at the /etc/ssh/sshd_config file, I noticed there was an X11 forwarding option which was disabled by default. Given that I don’t have X-Windows installed on my server, I’ve decided to install ssh on my desktop computer so I can try it out.

Steps to enable X11 forwarding

  • Open /etc/ssh/ssh_config and comment out:
    # ForwardAgent yes
    # ForwardX11 yes
    # ForwardX11Trusted yes
  • Open /etc/sshd_config and (X11Forwarding yes) should already be commented out
  • Restart ssh server
  • sudo /etc/init.d/ssh restart

    That’s it!!!

  • Now log on into the remote machine using the -X option
  • ssh -X user@192.168.0.1

    type gnome-session
    Your X session should automatically start.

    I also logged in using OS X and it worked perfectly fine. Everything was kinda off sluggish to use, and I was doing everything completely on wireless so that probably made it even more slower. In conclusion who needs VNC when you could securely forward X11 session between *nix computers using ssh!!

    PSP running OpenBSD 4.0 according to Nmap

    I was bored and decided to due a random network scan and I noticed that it also scanned my PSP but the details were kind of wierd.

    OpenVPN

    I got a headache from tying to set up and get up and running OpenVPN. I’ve been trying to setup a local VPN server in my Linux box, but its overwhelming of all the crap I have to do to get this thing working. Creating the keys, editing multiple configuration files, and building my own certificates. Setting a VPN in Windows Server 2003 is a walk in the park compare to this.

    InspectorWordpress has prevented 0 attacks.