Tuesday, August 22, 2006

Apache and PHP obscurity tweaks

Was playing around with conf files and found some options to increase the obscurity of the server.

In apache.conf setting these should set Apache to reveal minimum information about your system and webserver/version:
ServerSignature Off
ServerTokens production

You also may want to disable/comment the /manual/ and /icons/ directories that are setup for a default Apache install.

Setting this setting in the php.ini file will stop PHP from revealing itself to the browser:
expose_php = Off


Just a few settings that will help obfusicate yourself, of course this wont protect you against actual exploits; but it's a start.

And remember to validate/strip tags from all forms PHP sends to a database.

Saturday, August 19, 2006

Flickr

This is a test post from flickr, a fancy photo sharing thing.

Friday, August 18, 2006

Download F.E.A.R . Combat for free

Download the full multiplayer component of F.E.A.R. - one of the most acclaimed PC shooters of all-time. It's FREE!

http://www.joinfear.com/

--

Have heard mixed opinions about the actual game; But if it's free there's no reason not to try.