Line 1: <?php
Line 2: if ($_SERVER['REQUEST_URI'] == $_SERVER['PHP_SELF'])
Line 3: exit();

What is it with people leaving default installations public facing? They must think I don’t have enough work to do. Inevitably, the server is compromised and used to host phishing attacks against clients of my employer.
Default Apache Install:

Plus PHPInfo page:

Equals phishing attack.

Nice equation.

Some pretty basic functions are missing from most of the *-nix systems by default. One of these is account lockout. In comes PAM Tally (pam_tally.so). This module maintains a count of attempted accesses, can reset count on success, and can deny access if too many attempts fail in succession.
pam_tally comes in two parts: pam_tally.so and [...]

On a recent post to a mailing list I subscribe to, a user indicated that they made an inadvertent blunder to a Linux machine they operated (they were an RHCE to boot). The email was as follows:

There are some things you can do like rpm -qlv <name_of_package> but you’re going to be troubleshooting broken items [...]

Welp, I signed up for CISSP training which starts on October 13th (company is paying). I don’t really have an idea of a cert test date yet. I’m thinking late winter-spring, but I should have a better idea after training completes. I’m looking forward to it either way. An employee where I work (not in [...]