• 0 Posts
  • 12 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle
  • Do a search for you server OS + STIG

    Then, for each service you’re hosting on that server, do a search for:

    Service/Program name + STIG/Benchmark

    There’s tons of work already done by the vendors in conjunction with the DoD (and CIS) to create lists of potential vulnerable settings that can be corrected before deploying the server.

    Along with this, you can usually find scripts and/or Ansible playbooks that will do most of the hardening for you. Though it’s a good Idea to understand what you do and do not need done.



  • True on the digit by digit code decryption. That I can forgive in the name of building tension and “counting down” in a visible way for the movie viewer. “When will it have the launch code?!” “In either 7 nano seconds or 12 years…”

    If they had been more accurate, it would have looked like the Bender xmas execution scene from Futurama:

    https://www.youtube.com/v/aRdRZ6TKo4s?t=25s

    I did like the fact that they showed war-dialing and doing research to find a way into the system. It’s also interesting that they showed some secure practices, like the fact there was no banner identifying the system or OS, giving less info to a would be hacker. Granted, now a days it would have the official DoD banner identifying it as a DoD system.

    I remember with Windows 95, LAN Manager passwords were hashed in two 7 digit sections which made extracting user password from the password hash file trivial:

    https://techgenix.com/how-cracked-windows-password-part1/

    Looks like it was worse than I remember. The passwords were first converted to all upper case first!



  • Indeed. I did something like I mentioned above + we replaced the master bathroom carpet (yuck) with tiles for pretty cheap. In return we locked in a 1 year rent reduction to recoup our costs and 2 years at a low rate.

    It worked out for everyone. We didn’t have to live with disgusting bathroom carpets, the place looked nicer for the rest of our rental period, it let us save money to put a down payment on a house, and we didn’t have the temptation to move to a “nicer looking” place and spend money and time on moving again.

    In the end, the landlord got back a place that was more attractive to future renters.

    The key is to ensure your landlord is a decent person (they exist). Ours only had the one house they were renting (used to be their house before they bought a new house in a better school district and decided to rent vs sell).

    If it’s a large holding company that is known to screw over tenants? Yeah fuck them, do the bare minimum and move out.


  • The way to do it is to work in either a rent decrease for X months for the work and materials or lock in a low rent for X years based on the work being done.

    Another alternative is to do the above and get the landlord to supply the materials.

    I’ve done it in the past and it has worked out well though usually for minor things (like replacing generic doorknobs with nicer looking ones, replacing a toilet with a better flushing one, or installing a ceiling fan).

    Adding insulation to the attic if it’s missing in spots can also make sense to do if you’re paying the utilities. Though again I would get the landlord to at a minimum to pay for materials or discount it from the rent.

    If the upgrades are things that will help make the unit more marketable when you move out, then they’d be dumb to turn it down.