Secure Open Directories

Friday, March 27th, 2009

By default, most ISP hosted Apache web server accounts do not prevent file indexing when a user navigates into a folder location missing a default index page. Why is this bad? For starters, it provides a quick and dirty method for determining your server/mod/plugin versions and install directory structure. Script Kiddie 101 stuff.

A quick and easy method to prevent casual file browsing is via a short root .htaccess mod:

# prevent directory browsing
Options -Indexes

Adding this option covers all the root sub folders automatically. Highly recommended for WordPress installs due to the shear volume of file directory information located in a typical install.


Skip Airport Security?

Thursday, August 14th, 2008

Well not really but last night as I was walking with Mel & Maddie through the Atlanta airport, I noticed a kiosk by the Delta check-in area that was promoting some sort of new service for frequent flyer’s (or anybody really). I’m a sucker for anything technical especially when it incorporates super secret squirrel stuff like fingerprint scanning and eyeball imaging:

Clear’s simple, two step enrollment process begins online. Applicants create an account and fill-in basic biographic information. Then, applicants must go to a Clear enrollment location, where our attendants will verify two forms of government-issued identification, and capture a photograph, your fingerprint images and your iris images. This information is used to allow you access to the designated Clear lane at the checkpoint.

I don’t think smaller municipal airports will spend any money on the tech since you usually don’t deal with long security lines when you fly into someplace like Sarasota or Melbourne, Florida but the overall idea for larger airports is still pretty cool imo. The web site claims you also avoid some of the normal hassle associated with bored TSA agents and airport terminal security check-points.

I guess if I was a frequent flyer, $128 a year would be worth it.