1 version=pmwiki-2.2.130 ordered=1 urlencoded=1
2 agent=Mozilla/5.0 (iPhone; CPU iPhone OS 14_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/87.0.4280.163 Mobile/15E148 Safari/604.1
10 targets=Openbsd.Ddos,Openbsd.Phishing,Openbsd.Shellinjection,Openbsd.Rootkit,Openbsd.Backdoor,Openbsd.Dos,Openbsd.Spamming,Openbsd.0days,Openbsd.Rootkits,Openbsd.Chroot,Openbsd.Pledge,Openbsd.Unveil,Openbsd.Pf,Openbsd.FilePermissions,Openbsd.Databaseperms,Openbsd.Passwords,Openbsd.Ssh,Openbsd.Secureweb,Openbsd.Ids,Openbsd.Trust,Openbsd.Defaultdeny
11 text=(:title Security Overview:)%0a%0aSecurity is not a product; it is a state of mind. Just because your software has a reputation for being secure does not make it secure. You and your users can be attacked by crackers, script kiddies, spammers, and thieves. You must have a pro-active approach towards defense!%0a%0aNo system is perfectly secure. You must constantly work to improve security. The more users and the more important your data is, the more effort attackers will spend to harm you. On the other hand, the more security you add, the more difficult the system becomes to use. For example, if you make your firewall too secure, you might lock yourself out.%0a%0aSecurity is extremely important for IRCNow's reputation. Here are some possible disasters when you don't secure your servers:%0a%0a# All our servers could be [[openbsd/ddos|DDoSed offline]]%0a# Customer emails, passwords, credit card info, private chats, and files are stolen%0a# Your personal IP and name are leaked on the Internet%0a# Your website is vandalized or loaded with illegal files for filesharing%0a# Your server is used for [[openbsd/phishing|phishing]], [[openbsd/ddos|DDoS attacks]], or [[openbsd/shellinjection|shell injection attacks]]%0a# A [[openbsd/rootkit|rootkit]] is planted in your server and [[openbsd/backdoor|backdoors]] are placed in your source code%0a%0a!! Attack Types%0a%0a# [[openbsd/phishing|Phishing]]: An attacker does '''not''' have to use advanced high-tech hacking skills. It's much easier for him to lie to you or pretend to be someone you trust. He can use a fake nick or use a fake email to impersonate one of our teammates. This is called [[openbsd/phishing|phishing]].%0a# [[openbsd/dos|Denial of Service]]: An attacker can cause your systems to fail and deny service. This doesn't require as much work as exploiting bugs or vulnerabilities in code.%0a# [[openbsd/spamming|Spamming]]: An attacker can spam your network, it is similar to a denial of service.%0a# [[openbsd/0days|0days]]: An attacker may exploit 0days%0a# [[openbsd/rootkits|Rootkits]]: Planting rootkits%0a%0a!! System Vulnerabilities%0a%0a# Are your [[openbsd/0days|public services secure]]?%0a# If the software is not secure, have you taken basic mitigation steps? For example, you can [[openbsd/chroot|set up a chroot]] or consider [[openbsd/pledge|pledge]] and [[openbsd/unveil|unveil]]%0a# Are your public services properly configured?%0a# Do you have a [[openbsd/pf|firewall]] enabled to block private services?%0a# Can an intruder [[openbsd/FilePermissions|read files, write to files, or execute files]] he is not supposed to?%0a# Can they [[openbsd/databaseperms|read databases]] they should not have access to?%0a# Can they [[openbsd/passwords|steal your password]] or [[openbsd/ssh|ssh keys]]?%0a# Are your [[openbsd/secureweb|web apps secure]]?%0a# Do you have proper logging? An [[openbsd/ids|intrusion detection system]] in place?%0a# [[openbsd/trust|Who can you trust?]]%0a%0a!! Default Deny%0a%0aThe best security policy is to [[openbsd/defaultdeny|deny everything except what you expressly permit]].%0a%0a%0aEven if you have a single dial up PPP account, or just a small site, this does not mean intruders won't be interested in your systems. Large, high-profile sites are not the only targets -- many intruders simply want to exploit as many sites as possible, regardless of their size. Additionally, they may use a security hole in your site to gain access to other sites you're connected to.%0a%0aIntruders have a lot of time on their hands, and can avoid guessing how you've obscured your system just by trying all the possibilities. There are also a number of reasons an intruder may be interested in your systems, which we will discuss later.%0a2.5.1. Host Security%0a%0aPerhaps the area of security on which administrators concentrate most is host-based security. This typically involves making sure your own system is secure, and hoping everyone else on your network does the same. Choosing good passwords, securing your host's local network services, keeping good accounting records, and upgrading programs with known security exploits are among the things the local security administrator is responsible for doing. Although this is absolutely necessary, it can become a daunting task once your network becomes larger than a few machines.%0a2.5.2. Local Network Security%0a%0aNetwork security is as necessary as local host security. With hundreds, thousands, or more computers on the same network, you can't rely on each one of those systems being secure. Ensuring that only authorized users can use your network, building firewalls, using strong encryption, and ensuring there are no "rogue" (that is, unsecured) machines on your network are all part of the network security administrator's duties.%0a%0aThis document will discuss some of the techniques used to secure your site, and hopefully show you some of the ways to prevent an intruder from gaining access to what you are trying to protect.%0a2.5.3. Security Through Obscurity%0a%0aOne type of security that must be discussed is "security through obscurity". This means, for example, moving a service that has known security vulnerabilities to a non-standard port in hopes that attackers won't notice it's there and thus won't exploit it. Rest assured that they can determine that it's there and will exploit it. Security through obscurity is no security at all. Simply because you may have a small site, or a relatively low profile, does not mean an intruder won't be interested in what you have. We'll discuss what you're protecting in the next sections.%0a%0a%0a2.5.4 Hardening Guides%0a%0aSSHD Configuration %0a
13 title=Security Overview
14 author:1620962043=caesar
15 diff:1620962043:1620961343:=56,60c56%0a%3c %0a%3c %0a%3c 2.5.4 Hardening Guides%0a%3c %0a%3c SSHD Configuration %0a---%0a> 2.5.4 Hardening Guides%0a\ No newline at end of file%0a
16 host:1620962043=209.205.141.198
17 author:1620961343=caesar
18 diff:1620961343:1612067755:=55,56c55%0a%3c One type of security that must be discussed is "security through obscurity". This means, for example, moving a service that has known security vulnerabilities to a non-standard port in hopes that attackers won't notice it's there and thus won't exploit it. Rest assured that they can determine that it's there and will exploit it. Security through obscurity is no security at all. Simply because you may have a small site, or a relatively low profile, does not mean an intruder won't be interested in what you have. We'll discuss what you're protecting in the next sections.%0a%3c 2.5.4 Hardening Guides%0a\ No newline at end of file%0a---%0a> One type of security that must be discussed is "security through obscurity". This means, for example, moving a service that has known security vulnerabilities to a non-standard port in hopes that attackers won't notice it's there and thus won't exploit it. Rest assured that they can determine that it's there and will exploit it. Security through obscurity is no security at all. Simply because you may have a small site, or a relatively low profile, does not mean an intruder won't be interested in what you have. We'll discuss what you're protecting in the next sections.%0a\ No newline at end of file%0a
19 host:1620961343=209.205.141.198
20 author:1612067755=jrmu
21 diff:1612067755:1612067745:=1c1%0a%3c (:title Security Overview:)%0a---%0a> (:title Security Audit:)%0a
22 host:1612067755=125.224.24.163
23 author:1612067745=jrmu
24 diff:1612067745:1612067745:=1,55d0%0a%3c (:title Security Audit:)%0a%3c %0a%3c Security is not a product; it is a state of mind. Just because your software has a reputation for being secure does not make it secure. You and your users can be attacked by crackers, script kiddies, spammers, and thieves. You must have a pro-active approach towards defense!%0a%3c %0a%3c No system is perfectly secure. You must constantly work to improve security. The more users and the more important your data is, the more effort attackers will spend to harm you. On the other hand, the more security you add, the more difficult the system becomes to use. For example, if you make your firewall too secure, you might lock yourself out.%0a%3c %0a%3c Security is extremely important for IRCNow's reputation. Here are some possible disasters when you don't secure your servers:%0a%3c %0a%3c # All our servers could be [[openbsd/ddos|DDoSed offline]]%0a%3c # Customer emails, passwords, credit card info, private chats, and files are stolen%0a%3c # Your personal IP and name are leaked on the Internet%0a%3c # Your website is vandalized or loaded with illegal files for filesharing%0a%3c # Your server is used for [[openbsd/phishing|phishing]], [[openbsd/ddos|DDoS attacks]], or [[openbsd/shellinjection|shell injection attacks]]%0a%3c # A [[openbsd/rootkit|rootkit]] is planted in your server and [[openbsd/backdoor|backdoors]] are placed in your source code%0a%3c %0a%3c !! Attack Types%0a%3c %0a%3c # [[openbsd/phishing|Phishing]]: An attacker does '''not''' have to use advanced high-tech hacking skills. It's much easier for him to lie to you or pretend to be someone you trust. He can use a fake nick or use a fake email to impersonate one of our teammates. This is called [[openbsd/phishing|phishing]].%0a%3c # [[openbsd/dos|Denial of Service]]: An attacker can cause your systems to fail and deny service. This doesn't require as much work as exploiting bugs or vulnerabilities in code.%0a%3c # [[openbsd/spamming|Spamming]]: An attacker can spam your network, it is similar to a denial of service.%0a%3c # [[openbsd/0days|0days]]: An attacker may exploit 0days%0a%3c # [[openbsd/rootkits|Rootkits]]: Planting rootkits%0a%3c %0a%3c !! System Vulnerabilities%0a%3c %0a%3c # Are your [[openbsd/0days|public services secure]]?%0a%3c # If the software is not secure, have you taken basic mitigation steps? For example, you can [[openbsd/chroot|set up a chroot]] or consider [[openbsd/pledge|pledge]] and [[openbsd/unveil|unveil]]%0a%3c # Are your public services properly configured?%0a%3c # Do you have a [[openbsd/pf|firewall]] enabled to block private services?%0a%3c # Can an intruder [[openbsd/FilePermissions|read files, write to files, or execute files]] he is not supposed to?%0a%3c # Can they [[openbsd/databaseperms|read databases]] they should not have access to?%0a%3c # Can they [[openbsd/passwords|steal your password]] or [[openbsd/ssh|ssh keys]]?%0a%3c # Are your [[openbsd/secureweb|web apps secure]]?%0a%3c # Do you have proper logging? An [[openbsd/ids|intrusion detection system]] in place?%0a%3c # [[openbsd/trust|Who can you trust?]]%0a%3c %0a%3c !! Default Deny%0a%3c %0a%3c The best security policy is to [[openbsd/defaultdeny|deny everything except what you expressly permit]].%0a%3c %0a%3c %0a%3c Even if you have a single dial up PPP account, or just a small site, this does not mean intruders won't be interested in your systems. Large, high-profile sites are not the only targets -- many intruders simply want to exploit as many sites as possible, regardless of their size. Additionally, they may use a security hole in your site to gain access to other sites you're connected to.%0a%3c %0a%3c Intruders have a lot of time on their hands, and can avoid guessing how you've obscured your system just by trying all the possibilities. There are also a number of reasons an intruder may be interested in your systems, which we will discuss later.%0a%3c 2.5.1. Host Security%0a%3c %0a%3c Perhaps the area of security on which administrators concentrate most is host-based security. This typically involves making sure your own system is secure, and hoping everyone else on your network does the same. Choosing good passwords, securing your host's local network services, keeping good accounting records, and upgrading programs with known security exploits are among the things the local security administrator is responsible for doing. Although this is absolutely necessary, it can become a daunting task once your network becomes larger than a few machines.%0a%3c 2.5.2. Local Network Security%0a%3c %0a%3c Network security is as necessary as local host security. With hundreds, thousands, or more computers on the same network, you can't rely on each one of those systems being secure. Ensuring that only authorized users can use your network, building firewalls, using strong encryption, and ensuring there are no "rogue" (that is, unsecured) machines on your network are all part of the network security administrator's duties.%0a%3c %0a%3c This document will discuss some of the techniques used to secure your site, and hopefully show you some of the ways to prevent an intruder from gaining access to what you are trying to protect.%0a%3c 2.5.3. Security Through Obscurity%0a%3c %0a%3c One type of security that must be discussed is "security through obscurity". This means, for example, moving a service that has known security vulnerabilities to a non-standard port in hopes that attackers won't notice it's there and thus won't exploit it. Rest assured that they can determine that it's there and will exploit it. Security through obscurity is no security at all. Simply because you may have a small site, or a relatively low profile, does not mean an intruder won't be interested in what you have. We'll discuss what you're protecting in the next sections.%0a\ No newline at end of file%0a
25 host:1612067745=125.224.24.163
