#security.
5 posts filed under this topic.
- [security]eMudhra CA compromise: my Mac's curl still trusted the bad certificatesEight eMudhra intermediate CA keys got compromised. Browsers already block them, but the curl that ships with macOS still trusted them. How I tested it and what I did about it.
- [wordpress]WordPress Malicious Process MitigationStep-by-step for an infected WordPress site: top to find the rogue process, lsof to locate the file, chmod 000 + chattr +i to neutralize it, then dig through cron and core.
- [security]Cloudflare Deny IPsDeny all except some IPs Go to your domain on Cloudflare. Choose the Security menu, and go to WAF. Then, Create firewall rule type the Rule name. Fill in the rule with this. * Field: IP Source Address * Operator: is not in * Value: 103.103.103.103, 104.104.104.104 (your allowed IP) * Choose an…
- [security]Hard to implement IPTables? Try this.Install ConfigServer Security & Firewall on a Linux server, add its Perl dependencies, and check whether the required firewall modules work.
- [whmcs]WHMCS: Lost 2FA Password?When a WHMCS admin loses their 2FA backup codes, the rescue path is a single UPDATE query against tbladmins to clear authmodule and authdata.