News for hackers. Stuff that matters.

gzur

You don't monitor web logs, you ship the logs to cold storage every [crontab spec units for time :)] and monitor your hosts and network for unusual activity.

If anything happens, THEN you look at the logs. The signal/noise ratio of the average web host logs makes combing through them just not worth it.

There are tons of products out there - have a look at OSSEC (https://www.ossec.net/), it's open source and free.

Re:Inside Palantir on Saturday May 07, 2016 @07:05AM (#11649131)
The headline graphic really caught my attention, because my fingers have ls -latr ingrained into them.

I thought it oddly fitting.

For the love of good give me a tl;dr
Re:Facebook is down in some parts of the world on Monday September 28, 2015 @04:25PM (#10292938)
http://www.isup.me/facebook.com says it's down as of now. But it works for me, from Denmark.

edit - Actually checked the link provided by OP and felt humbled.

*edit - ran the test again. error rate down to 28%

Re:List of April Fools' Day Announcements on Wednesday April 01, 2015 @05:41AM (#9302580)
Transform your work world with holograms!

Tempo Vision is hardware that enhances the way teams experience their environment in Tempo and JIRA.

http://www.tempoplugin.com/tempo-vision/

Re:A Decentralized Lie Detector on Friday February 27, 2015 @05:09AM (#9118084)
That page loads but doesn't render for me (Chrome 4.x/FF 36) ... I feel so excluded.

  Uncaught TypeError: Cannot read property 'in_china' of undefined
Re:Ask HN: What is this triangle in the Philippines? on Wednesday January 28, 2015 @04:00AM (#8958810)
That looks like somebody messed up while converting image data to vector data in their GIS.

Sometimes you see stuff similar to this when you have a bunch of coordinates and a few of them are corrupted - then the lines would shoot off somewhere, and sometimes you might not even notice it. BUT this doesn't look like that - hell it could be pastefuck.

Re:Fish vs. Fish in Street Fighter II on Wednesday August 20, 2014 @03:53PM (#8204202)
I thought I was going to see Phil Fish fight himself, somehow.
Why isn't there a big fat blinking TRY ME button somewhere on that site? And if it's there, why isn't it in my face? And don't ask me to create an account before showing me the goods, because I won't.

Aw man, I've turned into the typical negative HN commenter. My mother would be so ashamed.

Re:GitHub is down on Friday March 21, 2014 @09:47AM (#7442244)
Could somebody explain to this mere mortal what drives these DDoS attacks? Is it blackmail? Is it the lulz?
Re:Kids, this is story of How I Met... my VPS hacked on Monday January 20, 2014 @02:52PM (#7091428)
Well, these hits on your ssh port target only the most low-hanging of the low-hanging fruit - i.e. common username/password combinations. Nobody's brute-forcing you anything, they're just trying some common user/pass pairs at random. Disable remote login by password in lieu of key authentication and you can sleep tightly while listening to the soothing hum of failed login attempts crashing upon your airtight SSH configuration.

In the long run, I've found that years pass and connections configs get lost and you forget which fancy port you used for your SSH connection on that server. Maybe YOU have an ironclad convention, but your co-worker had another one, and you can't remember what port he used. And he's left the company or died or joined a cult.

Kids, leave your SSH ports alone. A config is just a config. But keys are forever.

Re:Exposed Webcam Viewer on Saturday April 13, 2013 @04:54PM (#5544642)
Re:Introducing Chronos: A Replacement for Cron on Saturday March 16, 2013 @08:03AM (#5385179)
Yeah, I'm amazed that people consistently run around reinventing the wheel, when there are 18-wheeled chariots out there free for the grabbing.
Re:Lights on Friday October 14, 2011 @07:31AM (#3110775)
Same here. Windows 7 Pro x86, Chrome.
Re:Backify Offers 512 GB Free Online Backup Storage on Friday October 14, 2011 @06:43AM (#3110688)
No, it's not difficult, it's just extremely insecure.

Email should always be treated as an insecure channel, so sending passwords over it is just bad security practice.

The system should only hang onto the password for as long as it takes to hash it.