Archives
Unit test your Firestore security rules
Posted on December 10, 2021 Leave a Comment
When developing a Firebase app with a Firestore database layer a lot of tutorials suggest allowing all traffic while developing and then setting the rules. I always do the other way around, I keep the default deny all rule and then open up for each use case I have. When writing security rules it’s very […]
Dealing with credentials in PowerShell
Posted on February 10, 2020 Leave a Comment
Whenever you write PowerShell scripts that are going to be used for automation you need to secure your credentials. The best practice is to use a service account to execute the PowerShell script and delegate whatever privileges it needs to execute. When dealing with internal systems and resources that are usually pretty easy if they […]
Unattended use of mysql_secure_installation
Posted on February 3, 2015 Leave a Comment
After installing MySQL on any Linux distribution you run the mysql_secure_installation script, or at least you should! It will prompt you to set a new root password, remove anon access and a few other things. But if you want this configuration to be done in a deployment or cloud-init script? The mysql_secure_installation command/script doesn’t accept […]
Open Source: A false sense of security
Posted on September 25, 2014 Leave a Comment
The heartbleed vulnerability dropped like a bombshell, a large majority of web servers on the internet was sharing there memory with the world. The even bigger bombshell was that the vulnerability had existed for over two years. Most people consider open source more secure then proprietary code since anyone can verify that it’s safe. The problem […]
Script: NTFS rights on user home directories
Posted on February 20, 2013 Leave a Comment
Have a normal Windows setup where the user have a home folder on the file server. All the users is connected to there \fileserverhome$%username% via GPO on logon. How ever we found that some of the folders had rights that where messed up. So i wrote a quick script that loopes through all folders and […]
Watchguard SSLVPN unavalible
Posted on November 18, 2011 Leave a Comment
One organization I work for have Watchguard firewalls and are using SSLVPN. Yesterday it just stopped working. You couldn’t connect with the client and if you tried to access the {firewall address}/sslvpn.html you got “Connection refused”. First I tried to reboot the firewall and ended up with the same result. Checked the debug log and […]
IIS 7 FTP access denied while uploading files
Posted on April 16, 2010 2 Comments
I got this strange problem yesterday at work. One of our developers was trying to upload files to e new server and he got 500 access denied each time he tried. After he spent hours double checking all the NTFS rights and IIS settings he asked me for help. At the first look I thought […]
Hackviking aka Kristofer Källsbo 