Tag Archives: security

MySQL/Security – Cleaning up post-install

Posted by on January 29, 2012 21:42:45 pm Comments Off

A default install of MySQL has anonymous users and root users with access via ‘%’ (all outside hosts) and a generally useless ‘test’ database.
Read more »

Apache/Security – Hide Apache Version Number

Posted by on January 29, 2012 21:38:16 pm Comments Off

Sometimes, you may like a bit of security-through-obscurity. Some PCI providers even require this.
Read more »

Apache/PCI – Disable Weak Cipher and older TLS Support

Posted by on January 29, 2012 04:13:25 am Comments Off

PCI compliance tests require you to disable weak ciphers and older TLS support.
Read more »

Apache/PCI – Disable TRACE Method

Posted by on January 29, 2012 04:08:31 am Comments Off

Some PCI tests require that you disable the Apache TRACE method as this can reveal sensitive information about the server.
Read more »