SoylentNews is people
SoylentNews
from the cat-and-mouse-and-dogged-determination dept.
A couple years ago I set up a simple brochure-ware site for the School Board in the district here in Brooklyn, hosted on a VPS instance on Linode, to publicize the dates of public meetings, meeting minutes, etc. The VPS doesn't contain any sensitive information so I locked down the ports to 80, 443, and 22, hardened the SSH with measures like fail2ban, kept the system updated every week or so, and called it a day.
Last week, though, the site was compromised. Blowing the instance away and re-creating it from physical backups is not a problem, but in poring through the system to figure out how it was breached I realized both that my own security chops aren't deep enough and that standard best security practices might not be good enough anymore, anyway, given the many vulnerabilities exposed in the last year and realities like the NSA trove that Shadow Brokers leaked.
So the question for the more experienced security professionals in the Soylent community is, can they recommend a good guide and/or site to hone linux security chops and forensic skills that's current?
(Score: 2) by mcgrew on Saturday June 03 2017, @05:10PM (2 children)
Register4less gives me 10 gigabytes, 5 email addresses, all thye tools I've ever heard of and many I haven't for less than fifty bucks a year. You're probably spending more on ISP service that will let you run a service.
mcgrewbooks.com mcgrew.info nooze.org
(Score: 2) by frojack on Saturday June 03 2017, @05:17PM
He said it was hosted on a VPS instance on Linode.
To me that sounds like he already has exactly what you are recommending.
No, you are mistaken. I've always had this sig.
(Score: 3, Informative) by el_oscuro on Sunday June 04 2017, @05:15AM
Hostgator is pretty cool too. I originally liked them because even there $10/month plans offered ssh access. More recently, I ran a wpscan on my site and was rather shocked to find that not only was Wordpress fully up to date, but all of the plugins I had were too. Even so, I deleted as many plugins as I could. If you run wordpress, wpscan is an essential tool.
SoylentNews is Bacon! [nueskes.com]