{"id":6801,"date":"2022-05-18T09:25:50","date_gmt":"2022-05-18T07:25:50","guid":{"rendered":"http:\/\/blog.bart.sk\/en\/?p=6801"},"modified":"2024-01-29T10:14:15","modified_gmt":"2024-01-29T09:14:15","slug":"jan-ondrej-try-prevent-threats-good-security","status":"publish","type":"post","link":"https:\/\/blog.bart.sk\/en\/jan-ondrej-try-prevent-threats-good-security\/","title":{"rendered":"J\u00e1n Ondrej: I Try to Prevent Threats with Good Security"},"content":{"rendered":"\n

Jano is our server specialist, or, as we call him, a server guru. He makes sure that the machines on which our clients’ projects run, work like clockwork. What does Jano’s work day look like and what does he like to do in his free time?<\/span><\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Jano, what does the work on the position of a \u201cserver guru\u201d involve?<\/b><\/h3>\n\n\n\n

In the company, I take care of server infrastructure \u2013 installation, configuration, updating, optimization of their performance and adaptation to requirements. This server infrastructure consists of a computer network, disk arrays and servers. Within the computer network, I take care of the design of its division (public, private, VPN), assignment of IP addresses, routing settings, DNS and the like.<\/span><\/p>\n\n\n\n

My job includes monitoring the network as well. This is done through the Nagios program, which usually reports problems to us before the customer notices, but also through our own TrafGrapher tool \u2013 it helps visualize the performance of servers and in case of a problem, determine how it happened.<\/span><\/p>\n\n\n

\n
\"\"<\/a>
Network monitoring via<\/span> TrafGrapher.<\/figcaption><\/figure><\/div>\n\n\n

I focus mainly on opensource technologies, i.e. mainly Linux and <\/span>
<\/span>the applications in it. For work I still use mainly a text terminal and a web browser firefox, using which I do almost all my work. As a developer of the Fedora Linux distribution, I contribute as a tester and an application package manager with the “proven packager” level.<\/span><\/p>\n\n\n\n

What does “proven packager” mean?<\/b><\/h3>\n\n\n\n

The packager status is obtained by a developer after demonstrating their ability to create installation packages for OS Fedora or EPEL. Normally, they only have access to their packages, or to others where someone has given them access. However, a proven packager has access to most packages, almost the entire system, and can fix bugs in them when the conditions are met.<\/span><\/p>\n\n\n\n

So not only do you care about security in our company, but you protect developer projects all around the world through the status of a proven packager. We’re very happy to have such a person in our company. What does your workday look like?<\/b><\/h3>\n\n\n\n

It starts by checking e-mails. Every day, the servers write me an “essay” about how they were doing the previous day. What they did, what pitfalls they had to face (e.g. hacker attacks) and what’s new.<\/span><\/p>\n\n\n\n

What’s new?<\/b><\/h3>\n\n\n\n

Updates ?. In some cases attacks or other server problems. The next steps depend on what I’ve learned in these reports. If I find a problem there, depending on the severity, I solve it immediately or plan to fix it later. I try to respond to simple things immediately so as not to impede anyone.<\/span><\/p>\n\n\n\n

And we thank you for that ?. Are there situations where you have to resist hackers?<\/b><\/h3>\n\n\n\n

Absolutely. But maybe it’s not as often as people think. The question is, what do they think of as a hacker? Most often it’s some virus or script that tries to exploit security holes in the system.<\/span><\/p>\n\n\n\n

And the smartest way is to prevent the attacks, right?<\/b><\/h3>\n\n\n\n

Yes, I’m trying to prevent attacks by properly securing the systems. This mainly includes regular updates to have all security holes patched, but also security by restricting access, e.g. through a firewall. Another problem is DOS or <\/span>DDOS attacks<\/span><\/a>, when an attacker tries to overload and thus shut down our services.<\/span><\/p>\n\n\n\n

Why do hackers need to attack a website? What do you think they get from it?<\/b><\/h3>\n\n\n\n

In our case, their main motive is to exploit the performance of our servers for further attacks and spamming. With further attacks, they acquire more and more additional resources, connect additional servers to their infrastructure, and thus increase their performance. I also encounter the fact that they mine cryptocurrencies on servers. Sometimes they may want to obtain sensitive data (personal data, passwords, etc.).<\/span><\/p>\n\n\n\n

Can hackers attack private individuals as well? What should we be careful about?<\/b><\/h3>\n\n\n\n

They sure can. With different viruses, for example. But those must have been written by an attacker. <\/span>Phishing<\/span><\/a> also causes a lot of problems, when an attacker tries to obtain users’ access passwords based on false claims.<\/span><\/p>\n\n\n\n

Each user should properly secure their devices, update software, set up a firewall, install antivirus. However, the behaviour of users is also important – not to download software from an unverified source on the Internet and to be careful where they enter their personal data.<\/span><\/p>\n\n\n

\n
\"\"<\/a>
Hiking on<\/span> J\u00e1no\u0161\u00edkovu Ba\u0161tu.<\/figcaption><\/figure><\/div>\n\n\n

We know that even a server needs to be turned off sometimes so that it can rest. How do you turn off?<\/b><\/h3>\n\n\n\n

I like cycling and hiking. Thanks to my colleague, I discovered geocaching at a time when I didn’t have a cell phone with GPS. And today we sometimes go on a trip because of geocaching, and sometimes we “just” go hiking and forget about geocaching ?. I also like to make things out of smart components like Arduino. I was at an open source presentation where they talked about this platform. It’s the most famous platform \u2013 reasonable price and good support.<\/span><\/p>\n\n\n\n

And what have you made on Arduino lately?<\/b><\/h3>\n\n\n\n

Most of them are small household items and a monitoring system \u2013 an alarm and sensors. But I also bought a 3D printer, learned how to work with it and design my own models. Most recently, I made a box for the alarm.<\/span><\/p>\n\n\n

\n
\"\"<\/a>
Modelled in the Blender 3D editor<\/span>.<\/figcaption><\/figure><\/div>\n\n\n

We can see that safety is not only your work, but also your life. This topic is very broad and we’ll focus on it \u2013 next time at the Frontend Masters event, in the preparation of which you participated as a specialist consultant. For that, as well as for the interview, we thank you, and we invite the rest of you to the Aston Building on June 7th at 18:00 \u2013 live again after a long time! <\/i><\/b> <\/strong><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"Jano is our server specialist, or, as we call him, a server guru. He makes sure that the…","protected":false},"author":33,"featured_media":6846,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","csco_display_header_overlay":false,"csco_singular_sidebar":"","csco_page_header_type":""},"categories":[210,251],"tags":[216,248,213,258],"_links":{"self":[{"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/posts\/6801"}],"collection":[{"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/users\/33"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/comments?post=6801"}],"version-history":[{"count":8,"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/posts\/6801\/revisions"}],"predecessor-version":[{"id":7348,"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/posts\/6801\/revisions\/7348"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/media\/6846"}],"wp:attachment":[{"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/media?parent=6801"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/categories?post=6801"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.bart.sk\/en\/wp-json\/wp\/v2\/tags?post=6801"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}