How Do I Secure My Box?

[alexander]

I have had a few people ask me this very question recently, so i decided to post my source for information on securing boxes, and some applications...

 

If you have questions, ask :)

 

But yes, you guys have heard of that NSA agency thingie, right? Well, it just so happens that they write some of the most amazing and paranoid guides to securing boxes...:

 

Security Configuration Guides

 

Enjoy, most are quite a read :evil:

[C1ay]

I think there is only one sure way to secure a Windows box. Disconnect all wires and cables, including the power cord, and place it in a safe and lock the door.

[alexander]

the 107 page manual is pretty thorough on securing a windows box, they are really thorough and paranoid about doing this, they are, after all, the NSA :Exclamati

 

i will be reading through the server 2k3 guide in about 15-20 minutes...btw... gotta build a windooze box :( at least its dual core opteron with a t of storage :Exclamati

[alexander]

actually the 107 page manual was on the SMS server... i gotta look at server 2k3 first, thats about 244 pages

[alexander]

actually the 107 page manual was on the SMS server... i gotta look at server 2k3 first, thats about 244 pages

[alexander]

interesting, securing the server guide is actually 244 pages, the 107 page manual is on securing sms... which i will also have to read... :Exclamati

 

bit of light reading for the afternoon...

[freeztar]

I like how the security guide for Vista is double the size of the one for XP. :Exclamati

[alexander]

i think the guide has the tools built with it (its an MSI)... so if you take XP tools and XP guide :Exclamati

[alexander]

still smaller...

 

well here is another one, RHEL5 vs Server 2k3 guide... server 2k3 is 3.3M RHEL5 is about 1M.

[LaurieAG]

But yes, you guys have heard of that NSA agency thingie, right? Well, it just so happens that they write some of the most amazing and paranoid guides to securing boxes...:

 

Hi Alexander,

 

Back then it was openly admitted on network security mailing lists that a bit of paranoia was a good asset if you were in network security. Now many of these the lists have been cancelled because anybody could be reading them.

[alexander]

They have secure mailing lists, which you can still read.... if you have the key to decrypt them :hyper:

[LaurieAG]

They actually split it up into public and private lists and then stopped the public list. Both were encrypted.