WHAT'S NEW?
Loading...
Showing posts with label security. Show all posts
Showing posts with label security. Show all posts
A severe content injection (privilege escalation) vulnerability affecting the REST API was discovered on all sites using WordPress 4.7.0 or 4.7.1.  This vulnerability allows an unauthenticated user to modify the content of any post or page within a WordPress site. 

Copy this code in your theme file (function.php)
add_filter('rest_authentication_errors','disable_rest_access');

// Function to disable REST API and improve WordPress 4.7.0 / 4.7.1 security

function disable_rest_access($access) {
    return new WP_Error(
        'rest_cannot_access','The REST API for WordPress is disabled.',
         array('status' => rest_authorization_required_code())
    );
}
How do I configure a new Ubuntu Raspberry Pi installation to accept ssh connections?



Follow these commands and you are ready:

sudo apt-get update
sudo apt-get install openssh-server
sudo ufw allow 22
That's the very minimum. It allows unlimited failed password attempts on a known port. Direct root-login is disabled (you can still su and sudo once logged in).
You need to harden it from the standard setup. I suggest:
  • Key-based logins. Disable password logins.
  • Move it off port 22. Use something crazy-high, in the 20000-60000 range.
  • Use fail2ban to ban people who do find it and try to brute it.
Move the SSH server to another port

Open /etc/ssh/sshd_config as root user and change PORT 


sudo ufw allow PORT
sudo /etc/init.d/ssh restart
use raspberry user to remotely login

If SSH service not start automatically on boot, try just simply setting

sudo systemctl enable ssh