One of the biggest security holes you could open on your server is to allow directly logging in as root through ssh, because any cracker can attempt to brute force your root password and potentially get access to your system if they can figure out your password.

BalaBit IT Security – also known as the “syslog-ng company”, based on their trusted logging solution,used by 650 000 corporate customers world-wide – forecasts a new trend on the logging market, driven by cloud providers. According to BalaBit, within the next few years not only compliance would drive the logging investments, but the exponential increase of cloud services and providers.

If you're like me and work for a company who has many linux admins all logging into servers and then su'ing to root, you may find this tip beneficial. It is simply 3 lines that you add to root's .bash_profile which will keep separate history files for each admin that su's to root and the commands they ran. It will allow you to go back and see what the user did as root.

• The new High-Speed Reliable Logging (HSRL) technology, developed by BalaBit IT Security, revolutionizes the global logging market: it is capable of handling up to 1.000.000 log messages* per second
• BalaBit’s syslog-ng Premium Edition 4 F1 already contains the High-Speed Reliable Logging (HSRL) technology developments

Reasons for using a reverse shell include: you can bypass firewalls, you can connect to your phone without knowing the ip, the connection is initiated from the phone so you don't need to have a ssh server listening on your phone. Just think of all the fun this makes possible!

By itself Wine is very usable but you need a fair amount of expertise or lots of time to get your favourite Windows application running correctly. This is why we have companies like Bordeaux Group and CodeWeavers who sell commercially supported Wine version or management tools that make our lives a little easier.

Enabling the root account in ubuntu is rarely necessary. Almost everything you need to do as root of an Ubuntu system can be done via sudo or gksudo. If you really need a persistent root login, the best alternative is to simulate a root login shell using the following command... It is tested in ubuntu 9.10 Karmic Koala also.

The Apache Web server (Apache) comes with a powerful logging framework. In the default configuration, Apache logs all errors to an error log and all access requests to an access log. The default level of logging is sufficient for analyzing traffic patterns and for getting basic information about errors, but it may be inadequate for troubleshooting purposes. Familiarity with all the logging features can help you troubleshoot the Web server or applications hosted on Apache.

One of my favorite things about mod_security is that (amongst other things), it provides logging where none was provided. In fact, there is a whole chapter dedicated to it (chapter 4 on audit logging). And thus the first chapter I went to (just for fun). So I started flipping back and forth between chapters 2 (writing rules) and 4 (audit logging) to create my ruleset.