<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>bizante Ian Walker Technical Blog &#187; security</title>
	<atom:link href="http://bizante.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://bizante.com</link>
	<description>innovative and unconventional uses of technology</description>
	<lastBuildDate>Sat, 08 Oct 2011 18:49:02 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	

<!-- Debugging help, do not remove -->
<meta name="Framework" content="Kpress" />
<meta name="Theme Version" content="1.1" />
<meta name="Framework Version" content="1.1" />


		<item>
		<title>clear Safari address bar history</title>
		<link>http://bizante.com/2011/02/clear-safari-address-bar-history/</link>
		<comments>http://bizante.com/2011/02/clear-safari-address-bar-history/#comments</comments>
		<pubDate>Thu, 10 Feb 2011 16:08:15 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[osx]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=315</guid>
		<description><![CDATA[- quit Safari ### = your username - delete, move or rename ~ /Users/###/Library/Safari/History.plist - start Safari again If you want to stop safari from recording the address bar history then do the following: Choose History: Clear History, and then quit Safari. In your user folder, go to Library/Safari and locate the history.plist file. Select [...]]]></description>
			<content:encoded><![CDATA[<p>- quit Safari</p>
<p>### = your username<br />
- delete, move or rename ~ /Users/###/Library/Safari/History.plist<br />
- start Safari again</p>
<p>If you want to stop safari from recording the address bar history then do the following:</p>
<p>Choose History: Clear History, and then quit Safari.</p>
<p>In your user folder, go to Library/Safari and locate the history.plist file.</p>
<p>Select the file, choose File: Get Info, and then click on the Locked option.</p>
<p>Now close the window.</p>
<p>When you relaunch Safari, autocompletion will still work as expected on bookmarks, and it will also work for URLs you visit in the current session.</p>
<p>But the next time you quit and restart Safari, the autocompletion data will vanish &#8212; it can&#8217;t be written to the locked .plist file.</p>
<p>To return to normal autocompletion, deselect the Locked option in the history.plist file&#8217;s Get Info dialog box.</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2011/02/clear-safari-address-bar-history/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>remove outdated non secure services</title>
		<link>http://bizante.com/2011/01/remove-outdated-non-secure-services/</link>
		<comments>http://bizante.com/2011/01/remove-outdated-non-secure-services/#comments</comments>
		<pubDate>Tue, 25 Jan 2011 17:21:42 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[bash commands]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=297</guid>
		<description><![CDATA[Avoid Using FTP, Telnet, And Rlogin / Rsh Under most network configurations, user names, passwords, FTP / telnet / rsh commands and transferred files can be captured by anyone on the same network using a packet sniffer. The common solution to this problem is to use either OpenSSH , SFTP, or FTPS (FTP over SSL), [...]]]></description>
			<content:encoded><![CDATA[<p>Avoid Using FTP, Telnet, And Rlogin / Rsh</p>
<p>Under most network configurations, user names, passwords, FTP / telnet / rsh commands and transferred files can be captured by anyone on the same network using a packet sniffer.<br />
The common solution to this problem is to use either OpenSSH , SFTP, or FTPS (FTP over SSL), which adds SSL or TLS encryption to FTP.<br />
Type the following command to delete NIS, rsh and other outdated service:</p>
<p># yum erase inetd xinetd ypserv tftp-server telnet-server rsh-serve</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2011/01/remove-outdated-non-secure-services/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>chkrootkit software</title>
		<link>http://bizante.com/2011/01/chkrootkit-software/</link>
		<comments>http://bizante.com/2011/01/chkrootkit-software/#comments</comments>
		<pubDate>Tue, 25 Jan 2011 17:17:45 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[bash commands]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=294</guid>
		<description><![CDATA[Chkrootkit &#8211; chkrootkit is a tool to locally check for signs of a rootkit. Type the following command to install chkrootkit $ yum install chkrootkit to run type $ chkrootkit or to search for suspicious strings type $ chkrootkit -x &#124; less]]></description>
			<content:encoded><![CDATA[<p>Chkrootkit &#8211; chkrootkit is a tool to locally check for signs of a rootkit. Type the following command to install chkrootkit</p>
<p>$ yum install chkrootkit</p>
<p>to run type</p>
<p>$ chkrootkit</p>
<p>or to search for suspicious strings type</p>
<p>$ chkrootkit -x | less</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2011/01/chkrootkit-software/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>how to find no-owner files</title>
		<link>http://bizante.com/2011/01/how-to-find-no-owner-files/</link>
		<comments>http://bizante.com/2011/01/how-to-find-no-owner-files/#comments</comments>
		<pubDate>Tue, 25 Jan 2011 17:01:16 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[bash commands]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=290</guid>
		<description><![CDATA[Files not owned by any user or group can pose a security problem. Just find them with the following command which do not belong to a valid user and a valid group find /dir -xdev \( -nouser -o -nogroup \) -print You need to investigate each reported file and either assign it to an appropriate [...]]]></description>
			<content:encoded><![CDATA[<p>Files not owned by any user or group can pose a security problem. Just find them with the following command which do not belong to a valid user and a valid group</p>
<p>find /dir -xdev \( -nouser -o -nogroup \) -print</p>
<p>You need to investigate each reported file and either assign it to an appropriate user and group or remove it.</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2011/01/how-to-find-no-owner-files/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>how to find world-writable files</title>
		<link>http://bizante.com/2011/01/how-to-find-world-writable-files/</link>
		<comments>http://bizante.com/2011/01/how-to-find-world-writable-files/#comments</comments>
		<pubDate>Tue, 25 Jan 2011 16:59:47 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[bash commands]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=288</guid>
		<description><![CDATA[Anyone can modify world-writable file resulting into a security issue. Use the following command to find all world writable and sticky bits set files: find /dir -xdev -type d \( -perm -0002 -a ! -perm -1000 \) -print You need to investigate each reported file and either set correct user and group permission or remove [...]]]></description>
			<content:encoded><![CDATA[<p>Anyone can modify world-writable file resulting into a security issue. Use the following command to find all world writable and sticky bits set files:</p>
<p>find /dir -xdev -type d \( -perm -0002 -a ! -perm -1000 \) -print</p>
<p>You need to investigate each reported file and either set correct user and group permission or remove it.</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2011/01/how-to-find-world-writable-files/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>list all open network ports</title>
		<link>http://bizante.com/2011/01/list-all-open-network-ports/</link>
		<comments>http://bizante.com/2011/01/list-all-open-network-ports/#comments</comments>
		<pubDate>Tue, 25 Jan 2011 16:56:45 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[bash commands]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=286</guid>
		<description><![CDATA[Use the following command to list all open ports and associated programs: netstat -tulpn]]></description>
			<content:encoded><![CDATA[<p>Use the following command to list all open ports and associated programs:</p>
<p>netstat -tulpn</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2011/01/list-all-open-network-ports/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>disable unwanted services</title>
		<link>http://bizante.com/2011/01/disable-unwanted-services/</link>
		<comments>http://bizante.com/2011/01/disable-unwanted-services/#comments</comments>
		<pubDate>Tue, 25 Jan 2011 16:54:31 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[bash commands]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=284</guid>
		<description><![CDATA[Disable all unnecessary services and daemons (services that runs in the background). Type the following command to list all services which are started at boot time in run level # 3: # chkconfig &#8211;list &#124; grep &#8217;3:on&#8217; To disable service, enter: # service serviceName stop # chkconfig serviceName off]]></description>
			<content:encoded><![CDATA[<p>Disable all unnecessary services and daemons (services that runs in the background). </p>
<p>Type the following command to list all services which are started at boot time in run level # 3:</p>
<p># chkconfig &#8211;list | grep &#8217;3:on&#8217;</p>
<p>To disable service, enter:</p>
<p># service serviceName stop<br />
# chkconfig serviceName off</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2011/01/disable-unwanted-services/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>monitor processing to stop bottlenecks</title>
		<link>http://bizante.com/2011/01/monitor-processing-to-stop-bottlenecks/</link>
		<comments>http://bizante.com/2011/01/monitor-processing-to-stop-bottlenecks/#comments</comments>
		<pubDate>Tue, 25 Jan 2011 16:51:19 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[linux]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=282</guid>
		<description><![CDATA[monitor processes , CPU, memory and disk bottlenecks with atop … But the tool itself can cause a lot of trouble in heavily loaded servers and it enables process accounting and has a service running all the time … To use it efficiently on RHEL , CentOS; 1- install rpmforge repo 2- # yum install [...]]]></description>
			<content:encoded><![CDATA[<p> monitor processes , CPU, memory and disk bottlenecks with  atop …</p>
<p>But the tool itself can cause a lot of trouble in heavily loaded servers and it enables process accounting and has a service running all the time …</p>
<p>To use it efficiently on RHEL , CentOS;<br />
1- install rpmforge repo<br />
2- # yum install atop<br />
3- # killalll atop<br />
4- # chkconfig atop off<br />
5- # rm -rf /tmp/atop.d/ /var/log/atop/<br />
6- then don’t directly run “atop” command , but instead run it as follows;<br />
# ATOPACCT=” atop</p>
<p>This tool has saved me hundreds of hours.<br />
atop has helped me to diagnose bottlenecks and solve them that couldn’t otherwise be easily detected and would need many different tools</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2011/01/monitor-processing-to-stop-bottlenecks/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>delete individual cookies in IE8 on Vista or Windows 7</title>
		<link>http://bizante.com/2010/11/delete-individual-cookies-in-ie8-on-vista-or-windows-7/</link>
		<comments>http://bizante.com/2010/11/delete-individual-cookies-in-ie8-on-vista-or-windows-7/#comments</comments>
		<pubDate>Tue, 23 Nov 2010 13:59:46 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[anything]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=241</guid>
		<description><![CDATA[Tools > Internet Options > Settings Then on the popup which should be titled &#8220;Temporary Internet Files and History Settings, click on &#8220;View Files&#8221;. You should be able to delete a single cookie. Cookies are typically identified by the filename cookie:@Website For example, here I would be cookie:bizante@user you are best using the search in [...]]]></description>
			<content:encoded><![CDATA[<p>Tools > Internet Options > Settings</p>
<p>Then on the popup which should be titled &#8220;Temporary Internet Files and History Settings, click on &#8220;View Files&#8221;.<br />
 You should be able to delete a single cookie.<br />
Cookies are typically identified by the filename cookie:@Website</p>
<p>For example, here I would be</p>
<p>cookie:bizante@user<br />
you are best using the search in the top right corner to find the cookie for the domain you want.</p>
<p>The folder that this is in is</p>
<p>C:\Users\%username%\AppData\Local\Microsoft\Windows\Temporary Internet Files</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2010/11/delete-individual-cookies-in-ie8-on-vista-or-windows-7/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>view cookies for current website</title>
		<link>http://bizante.com/2010/11/view-cookies-for-current-website/</link>
		<comments>http://bizante.com/2010/11/view-cookies-for-current-website/#comments</comments>
		<pubDate>Tue, 23 Nov 2010 13:57:39 +0000</pubDate>
		<dc:creator>admin</dc:creator>
				<category><![CDATA[anything]]></category>
		<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://bizante.com/?p=239</guid>
		<description><![CDATA[If you want to know the contents of a cookie being used on the website you are currently looking at then just enter javascript:alert(document.cookie) in the browser address bar.]]></description>
			<content:encoded><![CDATA[<p>If you want to know the contents of a cookie being used on the website you are currently looking at then just enter </p>
<p>javascript:alert(document.cookie)</p>
<p>in the browser address bar.</p>
]]></content:encoded>
			<wfw:commentRss>http://bizante.com/2010/11/view-cookies-for-current-website/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

