Articles

Additional Useful Apache2 Config Settings

Here's a couple of tips to help make it as Mac-compatible as possible.

SSL and Security Certificates

SSL (secure sockets layer) is an encryption standard that is implemented by many widely used web-servers as the HTTPS protocol for use over the web. The HTTPS protocol is most commonly used by e-co...

Knowledge Process Management

Knowledge processes cannot be managed following the standard business process management paradigm. In the following article some guidelines are given for organizations willing to better manage thei...

Create Your Methodology Based On A Standard Framework

This article, the first of a series of three, gives some tips on designing and implementing a methodology based on a standard framework such as ITIL or PMBoK.

The Insecure Indexing Vulnerability

This paper describes several techniques (many of them new) for exposing file contents using the site search functionality. It is assumed that a site contains documents which are not visible/accessi...

Common Security Problems in the Code of Dynamic Web Applications

The majority of occurring software security holes in web applications may be sorted into just two categories: Failure to deal with metacharacters, and authorization problems due to giving too much ...

Rebuilding failed Linux software RAID

Recently I had a hard drive fail. It was part of a Linux software RAID 1 (mirrored drives), so we lost no data, and just needed to replace hardware. However, the raid does requires rebuilding. A ha...

Automating Tasks in Linux using Cron

Linux has a powerful task scheduler called Cron. Cron will allow you to run commands automatically at times specified by you. Cron is similar to the task scheduler you find in Windows. To keep trac...

Using Windows Terminal Services with Linux

If you are like me and you prefer using Linux, but are forced to use Windows at the job for various tasks, then using Windows Terminal Services is a nice way of getting around the need to boot into...

Host, Dig

I tend to use "dig" for DNS lookups, but it's more habit than anything else. The main page for host says "host is a simple utility for performing DNS lookup" while dig's brags "Most DNS administrat...