-
deghost ridding the world of the ghost vulnerability one host at a time
As part of our mission to wipe the ‘ghost’ vulnerability (CVE-2015-0235) from our customers servers we have created ‘deghost’. Deghost is a cross-distro script to determine the vulnerability of a libc library on a server and then patch that where possible. https://github.com/pbkwee/distrorejuve In most cases this is as simple as apt-get install libc6 or yum…
-
CPU usage graphs
-
SSLv3 and securing against Poodle
If you are using SSL in your web server, you probably want to read this. Google recently published details about an attack that targets SSLv3. The exploit first allows attackers to initiate a “downgrade dance” that tells the client that the server doesn’t support the more secure TLS (Transport Layer Security) protocol and forces it…
-
Getting Started with Docker
Written by Andrew Colin Kissa Introduction We’re happy to announce the availability of Docker support on our VPS installations. In this blog post, we aim to introduce you to Docker one of the most exciting and powerful open-source projects that has sprung up in the recent years. In a nutshell, Docker offers you the tools to…
-
Centos 7 Release – Whats New
-
Connecting to MySQL from external sources + IPTables
By default, MySQL only allows local connections. This is due to security, and for the most part works just fine for most people. Ideally you can use things like PHPMyAdmin for things like this, or even command line. Occasionally people need to connect from externally, either from a web front end, or some other PC,…
-
NTP servers and DoS Attacks
NTP servers have been in the news over the New Year, as security sites and social media talk about potential attacks. This is important because many linux servers run ntpd to help keep their clock time correct. One of the first reports and some solutions are clearly described on litnet … In LITNET we recently…
-
Linux.conf.au – LCA2014 Perth visit (Part 2)
-
Linux.conf.au – LCA2014 Perth visit (Part 1)
-
CPanel Upgrades break Cookie IP validation