SkyHorse.Org

ModSecurity 2.5 : a book by Magnus Mischel

December 10th, 2009 SkyHorse

When I received ModSecurity 2.5 by Magnus Mischel through the post I was expecting a decent, thick and technically focused book on setting up and configuring obscure areas of ModSecurity.
On reading it I was pleasantly surprised to find how practical, direct and friendly it was (it even has its own section explaining what “Regular Expressions” are), so this is not just for the expert user, but beginner sys admin too.
The book guides you through all the steps to setting up ModSecurity 2.5 in your apache server, from installation to setting up basic and advanced rules. It also takes a look at real-life examples which is a definite must read as its the hardest part for anyone starting to use the tool.
At £30.99 (£21.99 for e-book version) its a good investment for everyone thinking about or already using ModSecurity to protect apache web servers.

Language English
Paperback 280 pages [191mm x 235mm]
Release date November 2009
ISBN 1847194745
ISBN 13 978-1-847194-74-9
Author(s) Magnus Mischel
Topics and Technologies Open Source, Linux Servers
Published by Packt Publishing

Tags: apache, book, hacking, mod-security, modsecurity, Security

Related posts:

• Fixing open DNS servers
• Major flaw on the DNS Internet architecture discovered
• modsec.sh updated

Posted in Uncategorized | No Comments »

You’ve been de-Phormed, have a nice day :)

November 12th, 2008 SkyHorse

Thanks to privacy advocate and anti-phorm campaigner Peter John of www.deformation.org.uk I found the way to stop Phorm from snooping and using your website’s data for their benefit.

In fact it’s quite simple as long as you have PHP or some server side technology on your web server.

An image (or another) request to your site responds with a cookie with the same format as Phorm’s opt-out cookie. So after you’ve opened this image in your browser Phorm won’t track what you do on my site. Neat!

In my case I used the default code and image from the dephormation script.

Have a look there for an easy how-to guide.

Have a nice day :)

Tags: behavioural-targeting, deep packet inspection, phorm

Related posts:

• Phorm strikes back
• Deep Packet Inspection takes another blow
• What is… Behavioural Targeting? Part I: Contextual, Re-targeting and Interest-based targeting

Posted in Uncategorized | No Comments »