Posts Tagged ‘remote access’

How to organize hidden VPN for Corporate network ?


How to organize a hidden VPN access to Corporate Network ?
The VPN access should be bi-direction type:
Incoming - to get access into Corporate Network from Public Internet.
Outgoing - to get unrestricted Secure internet access from Corporate Network.
It’s very easy to build such kind of VPN system if you know how is organized the Corporate Network environment.
Down here I'm going to show you how to do it on example of one typical network scheme.
Continue reading “How to organize hidden VPN for Corporate network ?” »



SSL HeartBleed – how to fetch confidential information from web server


        SSL HeartBleed (CVE-2014-0160) – this is know security vulnerability bug in OpenSSL protocol of version 1.0.1 through 1.0.1f and 1.0.2-beta.

        A vulnerability in OpenSSL could allow a remote attacker to expose sensitive data, possibly including user authentication credentials and secret keys, through incorrect memory handling in the TLS heartbeat extension.

        I am not going to explain what this bug can do or how it present in protocol side of SSL. More detail about it you can find on official US Government web site US-CERT [ United states computer emergency readiness team ] and HeartBleed web site.

Continue reading “SSL HeartBleed – how to fetch confidential information from web server” »