Monthly Archives: June 2015

Uncategorized

Example DMARC Records

Leave a comment

A conservative DMARC deployment cycle would resemble:

TXT Record Value
1. Monitor all “v=DMARC1; p=none; rua=mailto:postmaster@your_domain.com”
2. Quarantine 1% “v=DMARC1; p=quarantine; pct=1; rua=mailto:postmaster@your_domain.com”
3. Quarantine 5% “v=DMARC1; p=quarantine; pct=5; rua=mailto:postmaster@your_domain.com”
4. Quarantine 10% “v=DMARC1; p=quarantine; pct=10; rua=mailto:postmaster@your_domain.com”
5. Quarantine 25% “v=DMARC1; p=quarantine; pct=25; rua=mailto:postmaster@your_domain.com”
6. Quarantine 50% “v=DMARC1; p=quarantine; pct=50; rua=mailto:postmaster@your_domain.com”
7. Quarantine all “v=DMARC1; p=quarantine; rua=mailto:postmaster@your_domain.com”
8. Reject 1% “v=DMARC1; p=reject; pct=1; rua=mailto:postmaster@your_domain.com”
9. Reject 5% “v=DMARC1; p=reject; pct=5; rua=mailto:postmaster@your_domain.com”
10. Reject 10% “v=DMARC1; p=reject; pct=10; rua=mailto:postmaster@your_domain.com”
11. Reject 25% “v=DMARC1; p=reject; pct=25; rua=mailto:postmaster@your_domain.com”
12. Reject 50% “v=DMARC1; p=reject; pct=50; rua=mailto:postmaster@your_domain.com”
13. Reject all “v=DMARC1; p=reject; rua=mailto:postmaster@your_domain.com”

Remember to view the daily reports.

Additional information:

DMARC & Google Apps: https://scottontechnology.com/google-apps-dmarc-information/

DMARC Record Lookup

MXToolBox: http://mxtoolbox.com/dmarc.aspx

Word

Time to impact

Leave a comment

Abstract from “Direct estimation of time-to-impact from optical flow”

http://ieeexplore.ieee.org/xpl/login.jsp?tp=&arnumber=212803&url=http%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D212803

The estimation of time to impact is of vital importance for animals as well as for autonomous robots. The optical flow is used to estimate the time to impact. The authors demonstrate that the motion equations that relate the egomotion and/or the motion of the objects in the scene to the optical flow are considerably simplified if the velocity is represented in a polar or log-polar coordinate system, as opposed to a Cartesian representation. In the former case, the time-to-impact can be directly computed from the velocity field and its derivatives. The analysis takes place considering a tracking egomotion, but is then generalized to arbitrary sensor and object motion. The main result stems from the abundance of equations that can be written directly relating the optical flow, represented in a polar or log-polar coordinate system, with the time-to-impact. Experiments performed on images acquired from real scenes are presented

Building this site, WordPress

7 Steps to Securing your WordPress installation WP Engine automatically does for you

Leave a comment

7 Steps to Securing your WordPress installation WP Engine automatically does for you

I came across this tutorial back in June of 2013 “10 Steps to Securing Your WordPress Installation” by Fouad Matin http://wp.tutsplus.com/tutorials/10-steps-to-securing-your-wordpress-installation/ (which is now http://code.tutsplus.com/tutorials/10-steps-to-securing-your-wordpress-installation–wp-21579) which provides some quick and easy steps to take to start securing your install.  Reading through it again, I noticed that WP Engine and the newer versions of WordPress do this automatically for you.

1. Remove the “Admin” superuser

WP Engine does not create the “Admin” superuser by default, so there is no account to remove.

2. Choose a strong password

WP Engine automatically installs Force Strong Passwords plugin

3. Limit failed login attempts

WP Engine automatically uses Limit Login Attempts

4. Always update WordPress

WP Engine automatically updates to minor WordPress revisions and automatically updates to major revisions after giving notice.

5. Hide WordPress version

Not feasible.  Even if you try the techniques listed

here: http://code.tutsplus.com/tutorials/10-steps-to-securing-your-wordpress-installation–wp-21579

here: http://www.wpbeginner.com/wp-tutorials/the-right-way-to-remove-wordpress-version-number/

You should still be able to find the version number with a tool like Secrui.net’s SiteCheck: https://sitecheck.sucuri.net/.

This guy tells you how to do it and then doesn’t even bother himself: http://stanislav.it/wordpress-security-how-to-remove-wordpress-version-number/

6. Backup

WP Engine automatically backs up your site on a daily basis and before and after any updates they perform.  You can manually initiate a snapshot from the my.wpengine.com portal, download a snapshot zip, or request a copy of their offsite backup hosted on Amazon S3.

7. Hide your plugins directory

Nothing there.  see for yourself: https://scottontechnology.com/wp-content/plugins/