Category Archives: security

Amplification/Reflection attacks: Jenkins CVE-2020-2100

Jenkins Jenkins (https://jenkins.io) is an open-source tool which can be used to automatically perform tasks such as automatic building and testing of software (continuous deployment/integration). Here in the Department of Chemistry we host some Jenkins instances used by some of … Continue reading

Posted in security, technical | Comments Off on Amplification/Reflection attacks: Jenkins CVE-2020-2100

Windows 7: end-of-life on January 14th

After January 14th, Windows 7 will no longer receive security updates from Microsoft. We will thus be blocking general network access for Windows 7 computers after the 14th. Users of departmentally-managed Windows 7 computers have already been contacted to arrange … Continue reading

Posted in security, Software | Comments Off on Windows 7: end-of-life on January 14th

Updated OpenVPN server

The Chemistry department has a VPN service providing remote access to our internal network. We’ve recently set up a second VPN server instance running a newer version of the VPN software with updated cryptography libraries and a great many bugfixes … Continue reading

Posted in Remote access, security, Uncategorized | Leave a comment

TeamViewer and remote access

Some of you may have read a recent story about possible security problems concerning TeamViewer, for example: http://www.theregister.co.uk/2016/06/01/teamviewer_mass_breach_report/ There are a number of supported remote access technologies in the Department, as described at http://www.ch.cam.ac.uk/computing/remote-access Our recommended method for remotely connecting … Continue reading

Posted in Remote access, security | Comments Off on TeamViewer and remote access

ssh fingerprints for bastion hosts

Those of you who use our bastion host (citadel.ch.cam.ac.uk) may know something about ssh fingerprints: these are identifiers used by ssh servers which allow you to check that you really are connecting to the right server, and allow you to … Continue reading

Posted in Linux, Remote access, security, technical | Comments Off on ssh fingerprints for bastion hosts

Upcoming OpenVPN changes

Many people in the department use our OpenVPN service to get access to the Chemistry network when they are not physically in the building. If you use OpenVPN, you need to make some changes before 22nd October 2015 to ensure … Continue reading

Posted in Network, Remote access, security | Comments Off on Upcoming OpenVPN changes

Keep your systems up to date!

A timely warning from the University Information Service: Various high profile data security exploits have made the news recently. Please apply all available software updates and patches (for the operating system and all installed apps) to your devices: desktop computers, … Continue reading

Posted in security, Software | Comments Off on Keep your systems up to date!