-
http://lastwatchdog.com/driveby-downloads-lurking-8-million-small-ecommerce/?utm_source=feedburner&utm_medium=feed&utm_campaign=Feed:+LastWatchdog+(The+Last+Watchdog)&utm_content=Google+Reader
Interesting article on the dangers of not keeping software patched, particularly with regards to open source content management systems.
-
http://www.startssl.com/
Free SSL certificates which are accepted by most modern browsers. Very cool.
-
http://www.hanselman.com/blog/SomeTroubleWithWildcardSSLCertificatesFireFoxAndRFC2818.aspx
Helpful article that explains some SSL errors with wildcard certificates which according to RFC2818 only go one level deep. So *.blah.com is good for foo.blah.com but not bar.foo.blah.com. Weird.
-
http://pajhome.org.uk/crypt/md5/
A javascript implementation of md5. Very handy.
-
http://www.tarsnap.com/
Encrypted backups which don't require you to trust the backup provider, although the code is open source but not free (as in freedom) and so there is only one possible provider...
-
http://www.firehost.com/
The managed hosting company used by page.ly. He raves about them.
-
http://www.savvyadmin.com/secure-remote-file-storage-with-ssh-and-dm-crypt/
Article explaining how to mount an encrypted container on a remote system. The remote file container is mounted over sshfs then locally mounted via dm-crypt. This has some major challenges, the approach is interesting albeit not particularly practical.
-
http://codesnippets.joyent.com/posts/show/1364
Code snippet to protect .svn / .bzr / CVS directories within apache via the .htaccess file for a single site.
-
http://codesnippets.joyent.com/posts/show/1365
Code snippet to protect .svn / .bzr / CVS directories within apache system wide in the httpd.conf file.
-
http://www.win.tue.nl/hashclash/rogue-ca/
Fascinating paper on hacking SSL due to weaknesses in the md5 algorithm.
-
http://ubuntuforums.org/showthread.php?t=451510
An out of date guide on how to setup scponly and a chrooted scponly. It includes info on a bug (dev/null) which is now fixed, but otherwise it generally applies.
-
http://random.irb.hr/
A random number generation web service that uses the intrinsic randomness of the quantum physical process of photonic emission in semiconductors and subsequent detection by photoelectric effect. Very cool. Available as a web service.
-
http://learninginlinux.wordpress.com/2008/04/23/installing-ubuntu-804-with-full-disk-encryption/
Walkthrough on setting up Ubuntu Hardy Heron with full disk encryption. Very handy. :)
-
http://www.seobook.com/wordpress-blog-hacking-checklist
Tips on how to both detect WordPress hacks and more importantly, prevent future hacks.
-
http://moneyofdoom.com/
Money of Doom is an ebook for 40 euros that explains how to open offshore accounts, protect your identity, etc, etc.
-
http://safe-mail.net/
Encrypted, paranoid friendly email service. 3mb free, 75MiB accounts from $25/year. Not particularly cheap and very Web 1.0.
-
http://ubuntu-tutorials.com/2007/08/17/7-steps-to-an-encrypted-partition-local-or-removable-disk/
A tutorial on setting up encrypted partitions in Ubuntu Gutsy Gibbon (7.10). Goes into some detail as to what each command does. Useful.
-
http://www.fsckin.com/2008/01/15/howto-setup-and-benchmark-encrypted-partitions-in-ubuntu/
An article on how to create an encrypted volume and then four ways to benchmark encrypted disk performance. Summary, the author estimates a 10% performance cost on a 3.2GHz system, 4Gb memory, no swap.
-
http://users.piuha.net/martti/comp/ubuntu/en/cryptolvm.html
A detailed how-to, including screenshots, on setting up an encrypted LVM in Ubuntu. This approach creates one single encrypted LVM and then multiple partitions within it (as well as an unencrypted boot partition). Easy to follow, useful reading.
-
http://www.wolf-howl.com/blogging/wordpress-clean-backend/
A list of security related plugins for WordPress. Some good stuff.
-
http://www.la-samhna.de/samhain/
Samhain is a multiplatform, open source host-based intrusion detection system (HIDS). Samhain provides file integrity checking, as well as rootkit detection, port monitoring, detection of rogue SUID executables, and hidden processes.
-
http://www.cs.tut.fi/%7Erammer/aide/manual.html
The beginnings of the manual for AIDE (Advanced Intrusion Detection Environment), the free replacement for Tripwire.
-
http://www.truecrypt.org/
TrueCrypt is a cross platform disk encryption package. You can create steganographic, hidden volumes which are completely deniable.
-
http://tredosoft.com/truecrypt_fedora_7
