<?xml version="1.0" encoding="UTF-8"?><!-- generator="WordPress/2.5.1" -->
<rss version="0.92">
<channel>
	<title>Simple Thoughts - Java and Web Blog &#187; Computer Security</title>
	<link>http://blog.taragana.com</link>
	<description>News and views from a Software Architect and Entrepreneur on Java and Web 2.0</description>
	<lastBuildDate>Fri, 25 Jul 2008 02:36:02 +0000</lastBuildDate>
	<docs>http://backend.userland.com/rss092</docs>
	<language>en</language>
	
	<item>
		<title>Apache HTTPD: How To Turn Off Index Listing in Directory &#038; Sub-Directories; Protect WordPress wp-content</title>
		<description><![CDATA[In Apache HTTPD server normally when you have no index or default page in a directory, a visitor may be served with a full list of files in that the directory. This could pose a serious security risk. It also exposes your files to the world at large, allowing them to be indexed by search [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/apache-httpd-how-to-turn-off-index-listing-in-directory-protect-wordpress-wp-content/</link>
			</item>
	<item>
		<title>DansGuardian Configure Error Fix - configure: error: pcre-config not found!</title>
		<description><![CDATA[On running ./configure in dansguardian (web content filter for Linux), I got the following error - configure: error: pcre-config not found!configure: WARNING: Cache variable ac_cv_prog_PCRE contains a newline.. The solution, as usual, is simple:

Install pcre-devel. On RedHat / Fedora systems that would be:
yum install pcre-devel
]]></description>
		<link>http://blog.taragana.com/index.php/archive/dansguardian-configure-error-fix-configure-error-pcre-config-not-found/</link>
			</item>
	<item>
		<title>WordPress 2.5 Released: Will WordPress 2.5 Be The First Problem Free Major Version? &#8230; Maybe Not</title>
		<description><![CDATA[Every major &#038; minor version of WordPress (1.5, 2.0, 2.1&#8230;) comes with teething problems which are then fixed in patch releases. Will WordPress 2.5 release finally break the curse? Maybe not&#8230;
WordPress 2.5 ships with 238 open defects, of which 5 are blockers (no software should ship with blockers) and 15 major defects in terms of [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/wordpress-25-released-will-wordpress-25-be-the-first-problem-free-major-version-maybe-not/</link>
			</item>
	<item>
		<title>PHP Security through Suhosin or Hardening Patch</title>
		<description><![CDATA[Suhosin is an advanced protection system for PHP installations. It was designed to protect servers and users from known and unknown flaws in PHP applications and the PHP core. Suhosin comes in two independent parts, that can be used separately or in combination. The first part is a small patch against the PHP core, that [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/php-security-through-suhosin-or-hardening-patch/</link>
			</item>
	<item>
		<title>Understanding Intrusion Detection System - Samhain</title>
		<description><![CDATA[You never worry about your site security until after your site has been hacked for the first time. It is always a moment of truth, when you first realize how vulnerable you (your site &#038; your data) truly are. You have probably dozens of scripts running on your server ranging from weblog software, comment form, [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/understanding-intrusion-detection-system-samhain/</link>
			</item>
	<item>
		<title>Detailed Post-Mortem of a Website Hack Through WordPress &#038; How To Protect Your WordPress Blog From Hacking</title>
		<description><![CDATA[This WordPress blog was hacked for few hours on 24th December (nice Christmas present!) from Russia. The hacker exploited several WordPress vulnerabilities in administrative scripts to gain full access to the website (as permitted to apache user), including the ability to upload &#038; run scripts, delete any file owned by apache user, view the file [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/detailed-post-mortem-of-a-website-hack-through-wordpress-how-to-protect-your-wordpress-blog-from-hacking/</link>
			</item>
	<item>
		<title>How To Forward Local Host &#038; Port via SSH Client To Remote SSH Server</title>
		<description><![CDATA[SSH is aptly termed as poor man's VPN. You can use it to either forward local host host name and port to a remote server running ssh daemon. You can also use it to forward remote server's port to a local host and port.
For example you may want to make a particular host and port [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/how-to-forward-local-host-port-via-ssh-client-to-remote-ssh-server/</link>
			</item>
	<item>
		<title>How To Protect Linux Server From Stolen Zombie Netblocks &#038; 100% Professional Spammer Controlled Netblocks</title>
		<description><![CDATA[DROP (Don't Route Or Peer) is an advisory "drop all traffic" list from Spamhaus, consisting of stolen 'zombie' netblocks and netblocks controlled entirely by professional spammers. DROP is a tiny sub-set of the SBL advisory designed for use by firewalls and routing equipment. It can also be implemented in iptable rules as explained below.
DROP is [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/how-to-protect-linux-server-from-stolen-zombie-netblocks-100-pro-spammer-controlled-netblocks/</link>
			</item>
	<item>
		<title>6 Simple &#038; Safe Postfix Changes for Over 95% Spam Reduction</title>
		<description><![CDATA[I used to receive around 5,000-7,000 spams daily on angsuman [at] taragana [dot] com email which is publicly available on the internet. It was consuming too many productive hours daily to fight spam. I decided to fight back. To reduce the spams I first made changes to my postfix configuration with the aim to stop [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/6-simple-safe-postfix-changes-for-over-95-spam-reduction/</link>
			</item>
	<item>
		<title>OpenSSL: How To Create Self-Signed Certificate</title>
		<description><![CDATA[OpenSSL is a free, popular, robust, high quality, open source (Apache License) toolkit implementing the Secure Sockets Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography library. It is available on multiple platforms (Linux, BSD &#038; Windows). In short it means that you can use OpenSSL [...]]]></description>
		<link>http://blog.taragana.com/index.php/archive/openssl-how-to-create-self-signed-certificate/</link>
			</item>
</channel>
</rss>
