Tag: security

Basic Authentication for Camping

Posted by on 26-Jan-2007

Small is smart ;) Another bright idea: Basic Authentication for Camping . No need from difficult admin controllers/methods. Good.

Adamantix support for Debian

Posted by on 06-Feb-2006

From Peter Busser’s email to the RSBAC ML:

I have compiled a number of RSBAC and Adamantix packages for Debian Sarge . This allows Debian Sarge users to benefit from some of the Adamantix features…

Adamantix started like Hardened Debian. Using well tested and stable Debian base, they added a lot of modern security stuff: PaX , SSP , RSBAC , making the distro one of the best choices for servers. I was involved in the early stages of the project but stopped contributing, because I was short of time. Still I’m following their progress and I’m happy to see good stuff going to the mainstream Debian also.

For homework: Chicken – Scheme-to-C compilerCHICKEN is a compiler that translates R5RS Scheme into portable C using a technique developed by Henry Baker (“Cheney on the M.T.A.”).

AccessFS

Posted by on 03-Feb-2006

Via Stu’s Diary :

AccessFS from Olaf Dietsche allows the system administrator to restrict access to a network port based on uid/gui, so that daemons no longer need to run as the root user:

# mount -t accessfs none /proc/access
# chown www /proc/access/net/ip/bind/80
# chown mail /proc/access/net/ip/bind/25

How To Protect Your Rails Apps Against XSS Attacks

Posted by on 26-Jan-2006

Via Exploration Age

The issue of Cross Site Scripting (XSS) vulnerabilities in web applications has been getting a lot of attention lately due to hacks on high-profile sites such as LiveJournal…The attached file ( html_escaper.rb ) makes it easy to protect your Ruby on Rails applications from these attacks…