Questions tagged [unix]
Unix is a family of multiuser, multitasking operating system that is widely used in workstations, servers and embedded devices. The best-known Unix variant is Linux.
20
questions
197
votes
7
answers
17k
views
How can I protect myself from this kind of clipboard abuse?
Clipboard abuse from websites
Many websites use JavaScript or CSS to stealthily insert or replace text in the user's clipboard whenever they copy information from the page. As far as I know this is ...
- 1,909
30
votes
5
answers
11k
views
Why should one use sudo? [duplicate]
Most modern Linux articles advice using sudo rather than logging into root. This advice is so ingrained, some distros don't automatically allow root login. Indeed they come pre-configured with sudo ...
- 453
9
votes
7
answers
3k
views
Is it wrong to root login with SSH?
I've long been under the impression that with unix, you should never login as root.
Now I've started using Virtual Private Servers over at DigitalOcean, and some advice is to use SSH keys to login as ...
- 193
97
votes
7
answers
39k
views
How does hacking work?
I am specifically talking about web servers, running Unix. I have always been curious of how hackers get the entry point. I mean I don't see how a hacker can hack into the webpage when the only entry ...
user7360
19
votes
3
answers
33k
views
How do I ensure data encryption on Samba transmission on *NIX systems?
I have a heterogeneous system (both MS and *nix) that communicates with CIFS/SMB. How can I ensure proper data encryption at the application layer?
- 1,075
2
votes
3
answers
37k
views
Netcat IP Spoofing
I am connecting to a server
nc -v 192.168.0.1 1111
But I want to do IP spoofing because the server on 192.168.0.1 only accepting commands from 7.7.7.7. We are two friends, I am 192.168.1.1, and my ...
- 37
62
votes
6
answers
32k
views
Unix execute permission can be easily bypassed. Is it superfluous, or what's the intention behind it?
The unix read permission is actually the same as the execute permission, so if e.g. one process has write access it's also able to execute the same file.
This can be done pretty easily:First this ...
- 723
52
votes
6
answers
11k
views
Why does one need a strong password on Unix?
SSH Server: I only allow public-key authentication.
Malicious Software: If it's running as my user it has access to my data and an internet connection, it's bad enough already. Yes, su access would ...
- 819
46
votes
4
answers
6k
views
Is passing sensitive data through the process environment secure?
Recently, I have been looking for the possibility to pass sensitive information from one process to another (at process startup time) without passing it through the command line or without using a ...
- 821
21
votes
5
answers
6k
views
Is it possible for a file that is non-executable and read-only to run malicious code?
On a POSIX system, is there a possibility for a file which is non-executable and read-only (aka with a mode 444) to run malicious code on a machine?
If so, can you explain how it would do so?
- 321
18
votes
2
answers
133k
views
Where is my password stored on Linux? [duplicate]
Is there a specific location where the passwords are stored ?
Is it depending on which version is used ?
Are they salted ?
- 907
13
votes
1
answer
6k
views
Unix command to generate cryptographically secure random string
Is the following Unix command cryptographically secure to randomly generate 20 characters (a-zA-Z0-9 only)?
dd if=/dev/urandom bs=256 count=1 2> /dev/null | LC_ALL=C tr -dc 'A-Za-z0-9' | head -c20
...
- 1,237
12
votes
2
answers
3k
views
How is the available entropy in /dev/random calculated (or estimated)?
It seems (to a non-expert) that /dev/random is acclaimed to be useable as a source of pure random data. However, I am curious as to the analysis of the file /dev/random.
/dev/random is a collection ...
Jonathan Gallagher
9
votes
1
answer
3k
views
Is symlink race a very common vulnerability in UNIX systems
As far as I know, when I am creating a new file or directory in a directory that can be written by multiple users (and thus an adversary can have made a symlink there), the only way to protect myself ...
- 629
9
votes
1
answer
1k
views
How can utilities with setuid set to root be secure if they are debuggable?
Today I heard at Uni something that broke my mental model about separation of users' rights. Namely, I heard that:
I can freely debug all programs I have the permission to run, even those that have ...
- 6,015
7
votes
4
answers
13k
views
Why are people saying that the X Window System is not secure?
Why are people saying that the X Window System is not secure? The OpenBSD team succeeded with privilege separation in 2003; why didn't the "Linux developers" do this?
To be clear: What security ...
- 6,279
4
votes
2
answers
3k
views
How to remove meta and sensitive data from PDF file?
I've some PDF files generated from different sources (such as web-browser, Photoshop, etc.) on Unix.
How do I make sure PDF doesn't contain any sensitive information such as IP address, OS, user name,...
- 43
4
votes
1
answer
362
views
What is a good method to report security breaches that are being used to actively spam?
I received an email the other day purporting to be from a bank I hadn't even heard of, so I decided to poke around. On some quick investigation, it looks like something has just latched onto some poor ...
- 151
3
votes
2
answers
784
views
How to track down and remove Mac malware that is calling out? [duplicate]
Little Snitch periodically brings up a dialog that says:
Terminal via node wants to accept an incoming connection from X on port 3000 (remoteware-cl).
X are different IPs in eastern europe. A full ...
- 31
2
votes
2
answers
897
views
Why superuser or administrator account should never locked?
Why should administrator or superuser account never locked regardless how many incorrect login attempts are made?
What should be done instead to alert the staff to the attempted instrusion?
- 29