amuck-landowner

Recent content by CodyRo

  1. C

    Networking Resources

    As others have said Packet Tracer is a good start - you can find it online at "places". There are also some courses / classes you can get that will work with Packet Tracer which can be useful to help work on certain area's If you're looking to just learn about networking. In general the Cisco...
  2. C

    No shave November / Movember

    Just bumping this (hey it's for a good cause). Just I'm cross posting what I posted on WHT - I'll match anyones donation up to $500 personally if you PM me your details. Even if you don't join the furry festivities please donate!
  3. C

    No shave November / Movember

    Going to follow the rules? If so better toss that face furniture and start fresh.
  4. C

    No shave November / Movember

    Why hello folks! Whose going to be joining us in our adventure to grow the manliest mustache in the name of fighting for men's health? For those of you not familiar with Movember I'd suggest checking out the Movember website to become more familiar with it. If you're going to do it please join...
  5. C

    Well that was fun

    Without knowing how their infrustructure was setup it's difficult to say however I'd say the majority of Fortune 500 companies will be using a HSM to handle the keys and not something silly like what WHMCS does (placing a arbritrary key in a config file on the same machine). Generally speaking...
  6. C

    Well that was fun

    Bingo - it's likely unrelated to the Adobe link. Corrleation != causation. Unfortunate however - hopefully you can contact anyone you have bills with and they'll understand.
  7. C

    What do YOU use to monitor your servers?

    It really depends on what but we use Nagios + check_mk + pnp4nagios for general monitoring. We use Munin for resource graphing and Cacti for other SNMP metrics (IE: switches). We use Smokeping to monitor latency / strange issues from other locations. We're in the midst of migrating over to...
  8. C

    Best Python WebFramework for a Python newb?

    The best one is really dependent on your needs. If you're creating a RESTful API Flask & Bottle (as others have mentioned) are absolutely amazing. If you're looking to build a robust portal a full stack framework like Django or TurboGears is not a bad way to go - the learning curve is steep but...
  9. C

    New WHMCS Exploit

    I think the latter. And I'm shilling for mod_security while others are shilling for Naxsi. *takes off the tin foil hat*
  10. C

    Features you'd want in a bash backup script?

    Great advice but if you'd want stronger encryption use something like AES-256 and have a certificate handy: http://stackoverflow.com/a/12233688 You could use a keypair although for larger files it's unsavory at times.
  11. C

    New WHMCS Exploit

    LiteSpeeds mod_security implementation is iffy at best (in my opinion - although they've done a better job at improving it). We personally put web applications that we don't trust / that are important behind Apache / mod_security to get the fullest effect. Far too many times we have seen wrong...
  12. C

    New WHMCS Exploit

    That is definitely useful but things such as WHMCS (or really any web application) should be behind a WAF. Most generic SQL injection rules would have prevented this - I know ours prevented the exploit from even getting to WHMCS. I'd recommend taking a peak at ASL's modsec rules - they're...
  13. C

    Colocrossing's Million Dollar Routers are Switches... Top of Rack Server Porn. Old Cisco.

    ColoCrossing has a global network. Routers and switches are expensive - especially when you have a larger network (IE: Buffalo, Chicago, etc). While the number itself is trivial one can easily drop $20,000 - $50,000 or more on a single device. Add in transit and everything else it's not that...
  14. C

    New WHMCS Exploit

    You have bigger issues if you're still running 4.x ;)
Top
amuck-landowner