<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>~chuck/blog &#187; Security</title>
	<atom:link href="http://www.ozymo.com/explosions/category/security/feed" rel="self" type="application/rss+xml" />
	<link>http://www.ozymo.com</link>
	<description>What more could you want?</description>
	<lastBuildDate>Tue, 17 Oct 2023 03:57:54 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.1</generator>
		<item>
		<title>Webmin Java-based File Manager and Mac, Safari</title>
		<link>http://www.ozymo.com/explosions/345</link>
		<comments>http://www.ozymo.com/explosions/345#comments</comments>
		<pubDate>Fri, 04 Jun 2010 13:55:19 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web]]></category>
		<category><![CDATA[OS X]]></category>
		<category><![CDATA[secure web content]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/?p=345</guid>
		<description><![CDATA[So, Mac uses their own Java, and Webmin doesn&#8217;t like it. I&#8217;ve found that opening Applications ->Utilities -> Java Preferences.app and clearing the cache helps. Click the Network tab, and click &#8220;Delete Files&#8230;&#8221; Optionally, uncheck &#8220;Keep temporary files for fast access&#8221; to make the fix permanent. Hope this helps! /cs]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/345/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Plesk 9 and PCI compliance</title>
		<link>http://www.ozymo.com/explosions/328</link>
		<comments>http://www.ozymo.com/explosions/328#comments</comments>
		<pubDate>Wed, 14 Apr 2010 08:46:27 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[openssl]]></category>
		<category><![CDATA[secure web content]]></category>
		<category><![CDATA[SSL]]></category>
		<category><![CDATA[webmaster]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/?p=328</guid>
		<description><![CDATA[The basics are easy, as one can attest with a Google search: Apache, Mail, etc. But, I&#8217;ve found that the Plesk CP for Plesk 9 doesn&#8217;t run on Apache, it runs on Lighttpd. To disable weak ciphers on a Plesk/Red Hat box, edit /etc/sw-cp-server/applications.d/plesk.conf and add this line: ssl.cipher-list = &#8220;TLSv1+HIGH !SSLv2 RC4+MEDIUM !aNULL !eNULL]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/328/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>GPG, Mail 4.2, Snow Leopard, and Happiness</title>
		<link>http://www.ozymo.com/explosions/289</link>
		<comments>http://www.ozymo.com/explosions/289#comments</comments>
		<pubDate>Fri, 05 Feb 2010 09:31:26 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Personal]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[OS X]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/?p=289</guid>
		<description><![CDATA[I discovered Cyanide and Happiness on YouTube the other day. It&#8217;s hilarious. Also, I found a way to use GPG signing and encryption in Apple&#8217;s Mail app. First, quit Mail. I know it&#8217;s hard, but you can do it! Second, back up your GPG keys and REMOVE YOUR EXISTING ~/.gnupg directory if it exists. The]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/289/feed</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>OpenSolaris as Synergy Host</title>
		<link>http://www.ozymo.com/explosions/174</link>
		<comments>http://www.ozymo.com/explosions/174#comments</comments>
		<pubDate>Wed, 22 Oct 2008 20:00:09 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[OpenSolaris]]></category>
		<category><![CDATA[Synergy]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/~chuck/blog/?p=174</guid>
		<description><![CDATA[UPDATE 081205: Adding &#8220;AllowTcpForwarding&#8221; to the sshd_config and restarting SSH should enable port forwarding, as it is disabled by default. &#8211; I have installed OpenSolaris on my Gateway MT3705 notebook.  I know.  I must be a glutton for punishment. I have a Dell desktop that I also use, and like to have my laptop be]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/174/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Secure Synergy</title>
		<link>http://www.ozymo.com/explosions/122</link>
		<comments>http://www.ozymo.com/explosions/122#comments</comments>
		<pubDate>Mon, 08 Sep 2008 21:11:55 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/~chuck/blog/?p=122</guid>
		<description><![CDATA[I have a laptop that I use as my primary computer, and a desktop machine that I attach it to at work (both run linux).  I use synergy to connect the two so that I don&#8217;t have to remember which mouse is attached. By default, synergy is quite insecure.  On the contrary, running synergy inside]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/122/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Configuring Simple Virtual FTP Users in vsftpd using PAM</title>
		<link>http://www.ozymo.com/explosions/54</link>
		<comments>http://www.ozymo.com/explosions/54#comments</comments>
		<pubDate>Tue, 29 Jul 2008 22:14:21 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/?p=54</guid>
		<description><![CDATA[This tutorial will set up a basic virtual user config for vsftpd on a RHEL5-based system.  I recommend that you make backups of existing config files before implementing this solution, in case you need to revert.  This allows virtual &#8220;guest&#8221; users to log in with individual usernames and passwords and have access to a base]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/54/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Superbugs and You</title>
		<link>http://www.ozymo.com/explosions/36</link>
		<comments>http://www.ozymo.com/explosions/36#comments</comments>
		<pubDate>Mon, 14 Apr 2008 04:53:24 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Linux]]></category>
		<category><![CDATA[Rants]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web]]></category>
		<category><![CDATA[email]]></category>
		<category><![CDATA[Internet]]></category>
		<category><![CDATA[spam]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/~chuck/blog/2008/04/13/superbugs-and-you/</guid>
		<description><![CDATA[So, I read an article that is both sensical and scary: Flaming Mountainside: Breeding Internet Superbugs I get a LOT of junk mail in my USPS mailbox in front of my house, and I pretty much ignore it, as long as it doesn&#8217;t look terribly important. It goes right into the trash. I have to]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/36/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Fglrx and Suspend in Ubuntu Hardy Alpha: Workaround</title>
		<link>http://www.ozymo.com/explosions/31</link>
		<comments>http://www.ozymo.com/explosions/31#comments</comments>
		<pubDate>Tue, 18 Mar 2008 04:41:42 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Linux]]></category>
		<category><![CDATA[Rants]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[ati]]></category>
		<category><![CDATA[fglrx]]></category>
		<category><![CDATA[Hardy]]></category>
		<category><![CDATA[heron]]></category>
		<category><![CDATA[hibernate]]></category>
		<category><![CDATA[resume]]></category>
		<category><![CDATA[sleep]]></category>
		<category><![CDATA[suspend]]></category>
		<category><![CDATA[Ubuntu]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/~chuck/blog/2008/03/17/fglrx-and-suspend-in-ubuntu-hardy-alpha/</guid>
		<description><![CDATA[Oh, my.  What a weird couple weeks it&#8217;s been for my laptop&#8230; I started with Alpha5, in which suspend worked.  Alpha 6 also supported suspend.  Both with the open-source ati driver upon install.  Beautiful!  Thank you Ubuntu for having an awesome distro! Supposedly, the xorg-driver-fglrx package in the Ubuntu repos for the Hardy development version]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/31/feed</wfw:commentRss>
		<slash:comments>3</slash:comments>
		</item>
		<item>
		<title>Passwordless Remote Login with SSH keys</title>
		<link>http://www.ozymo.com/explosions/15</link>
		<comments>http://www.ozymo.com/explosions/15#comments</comments>
		<pubDate>Sun, 24 Feb 2008 05:57:26 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[certificate]]></category>
		<category><![CDATA[key]]></category>
		<category><![CDATA[SSH]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/~chuck/blog/2008/02/23/password-free-login-with-ssh-keys/</guid>
		<description><![CDATA[I log into my server several times a day through SSH. Sometimes, it gets a little frustrating trying to type that oh-so-secure random password every time. I&#8217;m a hunt&#8217;n'peck typist, and typically get my password wrong a few times. So, I&#8217;ve implemented an SSH key setup that I use to connect between machines. Here&#8217;s how:]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/15/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Labeling your Encrypted USB Partitions</title>
		<link>http://www.ozymo.com/explosions/12</link>
		<comments>http://www.ozymo.com/explosions/12#comments</comments>
		<pubDate>Sat, 23 Feb 2008 04:43:30 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[USB]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/~chuck/blog/?p=12</guid>
		<description><![CDATA[So, the other day, I plugged in my USB drive with the encrypted partitions I created, and realized I was tired of having to wonder which one was which before checking the size or contents. The reason it&#8217;s an issue is because I created two encrypted partitions. One is 5MB for SSH and GPG keys]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/12/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Create a Self-Signed Cert with OpenSSL</title>
		<link>http://www.ozymo.com/explosions/11</link>
		<comments>http://www.ozymo.com/explosions/11#comments</comments>
		<pubDate>Sun, 17 Feb 2008 22:26:16 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Web]]></category>
		<category><![CDATA[Apache]]></category>
		<category><![CDATA[certificate]]></category>
		<category><![CDATA[openssl]]></category>
		<category><![CDATA[secure web content]]></category>
		<category><![CDATA[SSL]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/~chuck/blog/?p=11</guid>
		<description><![CDATA[Every once in a while, the need arises for a certificate without the exorbitant price tag that comes with Thawte or Verisign. Of course, those outfits will give you a certificate that matches the CA certs built in to common browsers like Firefox and Safari. Or IE. But I don&#8217;t like IE. But for a]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/11/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Encrypted USB with dm-crypt and LUKS</title>
		<link>http://www.ozymo.com/explosions/10</link>
		<comments>http://www.ozymo.com/explosions/10#comments</comments>
		<pubDate>Thu, 14 Feb 2008 01:49:42 +0000</pubDate>
		<dc:creator>chuck</dc:creator>
				<category><![CDATA[Admin]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[USB]]></category>

		<guid isPermaLink="false">http://www.ozymo.com/~chuck/blog/?p=10</guid>
		<description><![CDATA[Recently, I came across an issue. I wanted to transfer some information from place to place, and have access to it, and make sure that no one else had access to it. So, why not set up an encrypted USB device? The cryptsetup package in Ubuntu, which provides a command-line interface for configuring encrypted devices,]]></description>
		<wfw:commentRss>http://www.ozymo.com/explosions/10/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
