The latest in tech, SysOps, personal growth, scripting, servers, virtualization and databases curated for you daily.
…Windows-based operating system (OS). It provides advanced features, including security descriptors, encryption, disk quotas, and support for rich metadata, enhancing both security and data management. Additionally, NTFS seamlessly integrates with…
…or duplicate content. Security: Many bots are actually vulnerability scanners looking for exploits. Note for IIS Users: If you are running on Windows Server with IIS, you should use the…
…Server’s firewall. This PowerShell solution blocks IP addresses that are trying to brute force your SQL Server logins, by blocking IP addresses in Windows Defender Firewall with Advanced Security. Microsoft…
…provides no additional security. In the developers documentation we find the source, and the relevant part is on lines 205 – 207: if ( false === strpos( $content, ‘[‘ )…
…Learn to find vulnerable WordPress plugins fast using PowerShell on Windows Server and IIS Of course you must have other security measures in place, like a web application firewall, good…
…</system.webServer> <!– WordPress wp-login.php security: IP address AllowList, all IP addresses not listed below are denied access to /wp-login.php. IIS IP and Domain Restrictions – or IP Security – module…
…to Control Panel > System and Security > Windows Firewall > Advanced Settings > Inbound Rules and add a new rule for port 22. OpenSSH logo Let’s connect! PS C:\>…
…tap your YubiKey. Windows Security: Touch your security key Sweet! 🙂 Reuse SSH connections If you connect and disconnect a lot, for example you’re git pull‘ing various repos, or running…
…and Windows Server 2019 using PowerShell, without downtime. Because they must be installed prior to your normal Windows Server security updates, you can install them anytime you want to during…
…issues! This post tackles most of your performance issues, by explaining important configuration settings for PHP & MySQL, server, security, and so on. Discover how this very blog has optimized…
…All with PowerShell of course. If an endpoint has restricted HTTPS connections based on security certificates or certificate thumbprints, you must be able to pull that certificate from your Windows…
Windows security – a red window with bars on a stone wall…
…solved. Topics include computer, server, web, sysadmin, database, virtualization, optimization and security. For the most part, I write as it comes; posts may seem incoherently written sometimes (my apologies 🙂…
…messages) to temporarily enable OPcache logging. The logfile must be writable by the web server process. But be careful with these settings. OPcache security It’s important to go over all…
…sure you connect with the highest possible TLS version. Add the following registry SchUseStrongCrypto and SystemDefaultTlsVersions keys and values: <# # Transport Layer Security (TLS) best practices with the .NET…
…requests where the length of the “Content-type” header is greater than 100 bytes. <configuration> <system.webServer> <security> <requestFiltering> <requestLimits> <headerLimits> <add header=”Content-type” sizeLimit=”100″ /> </headerLimits> </requestLimits> </requestFiltering> </security> </system.webServer> </configuration> Automated…
…You can re-enable comments for individual posts using the Discussion settings available during post creation or editing. Consider using captcha plugins or Cloudflare Turnstile for added comment security against spam….
…<add ipAddress=”108.178.5.100″ allowed=”false” /> <!– …… –> We add this to our web.config file under <security> <ipSecurity>, just copy and paste. Now all those IP addresses are blocked and denied…
…trust To prevent Security Exceptions, this SecurityClass and IPermission must be configured in the web_mediumtrust.config file. Open the file (C:\Windows\Microsoft.NET\Framework\v4.0.30319\Config\web_mediumtrust.config) and add: <securityclass Name=”MySqlClientPermission” Description=”MySql.Data.MySqlClient.MySqlClientPermission, MySql.Data, Version=6.5.4.0, Culture=neutral, PublicKeyToken=c5687fc88969c44d” />…
…remember MD5 collisions), a hash algorithm can be a valuable method in your day to day security and systems administration workflow: Checking files haven’t been tampered with. Suppose I have…