My First 10 Minutes on a Server

It covers 10x what all the other guides cover in terms of server and application security. It was posted a few weeks ago on HN but didn't make the front-page.

Re: My First 10 Minutes on a Server

#8

Post by codelitt » Wed, Jun 15, 2016, 3:24 PM UTC

malingo wrote: post #6

This is good advice on achieving the most secure SSH configuration: https://stribika.github.io/2015/01/04/secure-secure-shell.ht... "My goal with this post here is to make NSA analysts sad."

Hahaha great quote.

I haven't seen this article before. It looks quite good. Thanks for posting it.

Re: My First 10 Minutes on a Server

#9

Post by atonse » Wed, Jun 15, 2016, 3:25 PM UTC

brokenwren wrote: post #7

This one is pretty decent but if you want the ultimate guide check out this one: https://www.inversoft.com/guides/2016-guide-to-user-data-sec... It covers 10x what all the other guides cover in terms of server and application security. It was posted a few weeks ago on HN but didn't make the front-page.

My worry here is that, in posting what seems to be a book, people just won't even do it because we don't have time to do it, unless this is a primary part of their jobs.

If a 10 minute guide gets users 90% of the way, then they're more likely to do it. And that's good enough to cover a majority of automated attacks.

Update: I take it back – they've provided scripts to run this stuff. I will explore these. Thanks for the link.

Re: My First 10 Minutes on a Server

#10

Post by _RPM » Wed, Jun 15, 2016, 3:26 PM UTC

cleeus wrote: post #2

echo "set background=dark" > /etc/vim/vimrc.local

You should use `>>` in order not truncate the existing file if there is one.