Viewing profile — imthenachoman

From what I can tell, their images are only for the big three cloud providers.

I am in the process of going through one of their benchmarks right now. They have some good stuff but I'm on page 130 of 431 and so far I haven't come across anything that needed t…

Holy crap! I did not see those two on Reddit. I had posted to Reddit and was monitoring those comments but didn't know of these. Thanks! Although, I'm sad both of those threads got…

The goal is to cover as many things as possible, not everything. Security is a very deep and complex topic -- no single document can cover everything. I want to wet the readers app…

Got it. Thank you!

Got it. Thanks!

This is great feedback! Thank you so much. I simplified things that would be too heavy to get into. The guide is not intended to teach everything about security -- that would be to…

Good idea. I need to figure out how to work that in into the guide. I added to the to-do list. Thanks!

I don't disagree but you gotta start with the basics. SELinux can be rather advanced/complex and probably warrants its own guide. I still have to learn it better before I try to wr…

It is on my to-do list. :)

Authy's mobile app should work with Google's TOTP PAM module.

When I was researching, literally every article I read mentioned Google'S TOTP PAM module. I can't even find any other ones that have active development. Do you know of any? Would …

You're welcome. Glad it helped someone!

How would you define a production server? Do you mean in the context of a home server or a server used by a large company? The guide is intended for a server for home use. I hope a…

A pass phrase on a certificate is two step. Password + TOTP is two factor.

Interesting. I have never read that anywhere. I will research. TY!

LAN IPs or WAN IPs? If you're using public/private keys you can use the "from" option for the keys. But it's not fool proof.

Thanks for the idea on port knocking. I always forget about it. Will look into it more...

Agreed. The guide is intended for a home server. Anything more and you'd need a more robust network with dedicated firewalls and a DMZ, etc....

Can you use Tripwire for free for home/consumer stuff? And what does RPM verification do? Just make sure all the packages you have installed are legit?

I have a need to be able to SSH to my server from unknown sources, like my friends house or something. And VPN just moves changes the open port so no real benefit there. I agree on…

I am not familiar with namespaces in this context? Can you please point me in the right direction? I have added AppArmor to my to-do list. I know what chroot and setuid are, not su…

Would you mind pasting the output of `deborphan` showing those two or creating a new issue on my GitHub page? I want to show it to the author of `deborphan` to see if he knows why …

I have never had issues with it but now you have me worried. I added a warning to the guide and will do some research.

Always. Google gives me 5 thousand pages of ads before the results I want. I hate to admit that sometimes I still use Google for searching. Like I love their shopping search.