R Two Tech

Bypassing Java with the SGD PC Client

SGD and the problem with Java



Ever since numerous Java exploitations were revealed and fixes implemented in 2013, Java and it's associated security fixes have been in a seemingly constant conflict with another of Oracle's products the Secure Global Desktop (SGD). It seems like each new Java update breaks one or more releases of SGD, forcing either an update of SGD or a difficult down grade to Java. And somewhat similar to being on any other version of Windows than Windows 10, if you're on an older version of Java your system will either constantly harass or silently force you to upgrade.



Fortunately, with newer releases of SGD you have the ability to completely take Java out of the equation by using the "Secure Global Desktop Client" which can be downloaded by connecting to any Secure Global Desktop's initial webtop session. To access the download use your browser to connect to the initial webtop session of your SGD server (in my case that would be https://r2lnx5.rtwotech.com) and look at the initial list of options it gives. Here is the list from my newer instance:

Read more at www.rtwotech.com

Securing vsftpd in RedHat Linux

FTP (File Transfer Protocol) is a common mechanism for moving files between computer systems. It’s been around since 1980 and has been used so frequently that most computer users have a least some familiarity with its commands and its control structure. The problem is that in its basic and most often found form, it has no security whatsoever. All user logins, passwords and data are passed across the network in a completely unencrypted, open text format. In fact, the vast majority of infected Linux systems I’ve worked on have been infected by users or bots connecting in via ftp.

So what I’ll do here is show you how to secure your vsftpd site by modifying the vsftp.conf configuration file and adding a self-signed certificate created with Open SSL.

Read more at www.rtwotech.com