Weblog Archives

You are currently browsing the archives for the Security tag.

Speed up Apache by including htaccess files into httpd.conf

It is widely known that, if virtual hosts in Apache (httpd) are configured to permit vhost administrators override specific configuration options at the directory level using htaccess files, the web server consumes valuable time in order to check whether an htaccess file exists in every directory included in the requested path and parse it. On [...]

How to configure mod_gnutls to use the RC4 cipher to mitigate the SSL/TLS vulnerability

It’s been a while since the details of an SSL/TLS vulnerability have been released to the public. Since then, security experts have worked on the issue and have released a whitepaper describing how to mitigate the attack, known as BEAST (Browser Exploit Against SSL/TLS).

How secure is the TOR network for everyday internet browsing?

I recently read that the Free Software Foundation has given the Award for Projects of Social Benefit to the TOR Project. Congratulations! There are indeed some cases that the TOR network can be extremely useful to the societies. On the other hand, the fact that an organization like the FSF gives this award to the [...]

How to change the expiration date of a GPG key

This post is a step-by-step tutorial on how to extend the expiration date of your GPG keys or reset it in case the keys have already expired. But, before we go through how to change the date, I’d like to write a few things about why setting an expiration date on your GPG keys is [...]

Using setenforce to switch SELinux mode wisely

setenforce is a command line utility that is used to switch the mode SELinux is running in from enforcing to permissive and vice versa without requiring a reboot. Lately, I’ve started experimenting again with SELinux on a live system. The default targeted SELinux policy, as usual, needs some adjustment to work with a custom server [...]

Be cautious with Notepad++

I use Microsoft Windows 7 RC on my main desktop computer since June 2009. Since there was no Windows ports of my favorite editors in Linux (gedit on Fedora/CentOS), I decided to use Notepad++, an open-source source code editor and Notepad replacement, which is released as free-software. Soon I realized that this application was too [...]

Free Personal Email Certificates Program discontinued by Thawte

I’ve been using Thawte‘s free personal email digital certificates for some years now. Unfortunately, Thawte discontinues the Personal E-mail Certificate and Web of Trust services. All issued certificates will be revoked on November 16th 2009 and the particular services will no longer be available after that date.

Reclaiming the forums from bots

It’s been a long time since the last time I had done any cleaning in the G-Loaded Forums. I use the forums for further discussion about the published content, since the comments are disabled after a period of time. During the last months the place had been left at the hands of bots. But this [...]

A stolen bike

Two weeks ago, my MTB got stolen. It was a cheap bike and, after 700Km during the last 5 months without any servicing, it was in a really bad shape. I used a cheap lock to “protect” it. I relied on the bike’s bad condition and assumed that noone would want to steal it. So, [...]

Critical vulnerability in Adobe Reader

Users of Adobe Reader should be aware of a newly discovered critical vulnerability in the Reader which could potentially allow a third party to execute arbitrary code, according to this security advisory by Adobe. The vulnerability affects several versions of Adobe Reader (and Acrobat). Adobe states that updates addressing the issue will be available by [...]