I've had a long session of improving security on my home server yesterday.
I never actually made a permanent and correct monitoring with rkhunter, but when I ran through all it's options, I finally came to realize this is just awesome, it just OWNZ! Greets to developers team!!!
Some guys from LQ Security forum really are the experts. I always knew that, but just again, in case you read my blog, I'd like to thank you all, the members of "online security team" of LQ, you know...

I never had to deal with chrooted environment before, and there isn't lots of info out there on the net. Best result I've found so far is http://www.cyberciti.biz/tips/howto-...oted-jail.html
Actually, it covers almost entire topic, but I'm going to explain how to bind it with nginx in gentoo linux environment.
Say, you have a site example.org with some app you don't really trust in /app dir. Your own-written site scripts are executed in non-chrooted PHP environment...

For how many years we thought it was safe while it was not! Update now to 1.0.6!

CVE-2010-0405

More info: http://google.com/search?q=CVE-2010-0405
and here:
http://xorl.wordpress.com/2010/09/21...eger-overflow/

Yesterday I made a small relocation of server boxes at home and decided to test if I can replace my current Pentium-I MMX 200MHz router with newer computer, which is Celeron 2400 MHz, 1GB of RAM.
Well, I sat there all night till I finally managed to make a minimal required kernel for current hardware platform. Entire system boots in around 30 secs and ready to work. I didn't add automatic start of my internet connection, I usually do it manually.
Now I'm able to see that my ISP actually...

I've recently used to hear from many guys that PHP is bad and useless language. Well, generally the source of that point of thinking is a bad code written by newbies(or mature noobs).
Yes, I admit PHP has some basic functions missing, some features need to be improved, etc. It's far from ideal language. But it is very easy to learn. The problem here is many beginners starting from PHP without reading documentation properly, without looking for security in their apps, and, as a result we have...