awkgeek

no profile record

Submissions

15 ready-to-use tips on how to secure your applications with NGINX

blog.wallarm.com

5 pointsby awkgeekil y a 11 ans0 comments

HOWTO: Everything you need to protect from ShellShock

blog.wallarm.com

1 pointsby awkgeekil y a 12 ans0 comments

comments

awkgeek

il y a 11 ansdiscuss

I like AWS direction towards security. But...

Who needs WAF with basic, static rules in 2015 when applications are deployed several times a day? Mod_security in a cloud? Well. Be ready to get a dedicated person to support it to avoid false positives. And I guess it's still easy to by-pass.

Give a try to Wallarm, NAXSI, Signal Sciences.

awkgeek

il y a 12 ansdiscuss

Here is how you can handle with it without rebooting the whole server:

for s in $(lsof | grep libc | awk '{print $1}' | sort | uniq); do if [[ -f "/etc/init.d/$s" && "$(ps aufx | grep -v grep | grep $s)" ]]; then echo $s; service $s restart; fi; done

From: http://blog.wallarm.com/post/109402223343/ghost-a-brief-reca...