Tech Tip Tuesday: Securing Samba

Tomorrow marks the ONE year anniversary of Cyber Hui's Tech Tip Tuesday.  Thanks to Jake Ross, Jason Yeo and whoever else contributed.

Hau`oli la Hanau

This week's TTT focuses on Securing Samba.

Samba is an Open Source/Free Software suite that provides seamless file and print services to SMB/CIFS clients." Samba is freely available, unlike other SMB/CIFS implementations, and allows for interoperability between Linux/Unix servers and Windows-based clients.

The following articles provide guidance on securing Samba.

How to Secure Samba (dated, but still relevant)
http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/securing-samba.html

Securing a Samba File and Print Server
https://help.ubuntu.com/12.04/serverguide/samba-fileprint-security.html

Secure SMB Connections
http://www.windowsecurity.com/articles-tutorials/misc_network_security/Secure-SMB-Connections.html

Linux command to check for guest access to your shares.
grep -i "guest ok = yes" /etc/samba/smb.conf

Linux command to check for SMB client signing
grep signing /etc/samba/smb.conf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.


Visit us at www.cyberhui.org
Like us at www.facebook.com/cyberhui
Follow us @cyber_hui
Email us at info@cyberhui.org

Tech Tip Tuesday – Bad Microsoft Patch MS 14-045

Do you faithfully patch your Windows machine every Patch Tuesday? Did you get a Blue Screen of Death (BSOD) after installing MS 14-045? Microsoft has published an official workaround but Naked Security from Sophos has good write up and simplified workaround.

https://nakedsecurity.sophos.com/2014/08/18/microsoft-pulls-patch-tuesday-kernel-update-ms14-045-can-cause-blue-screen-of-death/

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Hacme Bank

Have you ever wanted to own your own bank? Hacme Bank simulates a “real-world” web services-enabled online banking application with common vulnerabilities and without the prison time for major breaches.

http://www.mcafee.com/us/downloads/free-tools/hacme-bank.aspx

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.

Tech Tip Tuesday – Data Back Up Options

There are two hurricanes approaching Hawaii. This might be a good time to back up your important files up. It’s as easy as 3-2-1.
3 - Keep 3 copies of any important file: 1 primary and 2 backups.
2 – Keep the files on 2 different media types to protect against different types of hazards.
1 – Store 1 copy offsite (e.g., outside your home or business facility).

http://www.us-cert.gov/sites/default/files/publications/data_backup_options.pdf

If you have a Tech Tip you want to share, send them to info@cyberhui.org and we'll get them out next #TechTipTuesday.