Security Archive

  • console-thumbnail-new

    Delete files securely on Linux – Journaled file systems

    Posted on December 18, 2009 | No Comments
    Few days ago I write about shred, which work fine for old systems, like EXT2, but not so nice with journaled file systems. Modern file systems need something more robust, like dd and srm (a secure replacement for rm). Unlike the standard rm, srm overwrites...

    Full Story

  • twitter-logo-new

    Twitter hacked? Not really, only Twitter DNS records compromised

    Posted on December 17, 2009 | 1 Comment
    I before post ‘Twitter Hacked by Iranian Cyber Army’, but actually just Twitter DNS records was hacked. I think even twitter.com server headers and tracepath to servers simply prove this, because they are completely different normally when hacked. Hacked twitter.com headers:

    Full Story

  • twitter-logo-new

    Twitter Hacked by Iranian Cyber Army

    Posted on December 17, 2009 | 1 Comment
    Twitter site is hacked by Iranian Cyber Army. Here is some screenshots and full info about page. Screenshots Server info and full html content lynx -mime_header http://twitter.com HTTP/1.1 200 OK Date: Fri, 18 Dec 2009 06:42:08 GMT Server: Apache/2.2.14 (Unix) mod_ssl/2.2.14 OpenSSL/0.9.8l DAV/2 mod_auth_passthrough/2.1 FrontPage/5.0.2.2635...

    Full Story

  • Howto hide and modify Apache server information (ServerSignature and ServerTokens) and Hide PHP version (X-Powered-By)

    Howto hide and modify Apache server information (ServerSignature and ServerTokens) and Hide PHP version (X-Powered-By)

    Posted on November 20, 2009 | No Comments
    By default almost all Apache installation shows sensitive server information with Apache version number, server operating system details, installed Apache modules, PHP-version and so on. Attackers can use this information when performing attacks. Some examples howto check server information that Apache sends

    Full Story