412 reputation
28
bio website
location
age
visits member for 2 years, 9 months
seen May 21 at 9:59

Feb
20
awarded  Yearling
Dec
19
comment Is Firefox on Ubuntu less secured (does it not confine Flash)?
IOW. Those are nice buzzwords. Someone defined them from first principles. If I can't follow their working out, I can't assess new claims (ex. from marketing of alleged security solutions).
Dec
19
comment Is Firefox on Ubuntu less secured (does it not confine Flash)?
Just because I admin systems doesn't mean I'm perfect! A friend does commercial webdev - i.e. he has admin access to websites. His workstation's on Firefox/Ubuntu; there's not any extra security. I don't think it's a high risk. But there's obviously some point where it'd become a problem. So where's the line between the two? If you don't consider those judgements, you won't find the lines.
Dec
19
revised Is Firefox on Ubuntu less secured (does it not confine Flash)?
edited title
Dec
19
comment Is Firefox on Ubuntu less secured (does it not confine Flash)?
Feel free to provide question edits to make it less over-broad. You're not wrong (though pushing this as a reason to switch, as ubuntu.com does, is I think questionable). But if you admin systems - which I do - you're a higher-value target and the math changes. There's a judgement, and there's the facts. The main question I was looking up here was the facts.
Dec
19
comment Firefox Flash plugin malware?
"Firefox" isn't more secure if users have to magically know to change the defaults to achieve that security. I do like using Firefox+NoScript, but when you unblock flash on Linux it's not confined (unlike Chrome on Linux). So where you unlock it, you become vulnerable to the security bugs in flash. security.stackexchange.com/questions/76486/…
Dec
19
revised Is Firefox on Ubuntu less secured (does it not confine Flash)?
edited body
Dec
19
revised Is Firefox on Ubuntu less secured (does it not confine Flash)?
added 255 characters in body
Dec
19
asked Is Firefox on Ubuntu less secured (does it not confine Flash)?
Dec
19
answered Is Firefox on Ubuntu less secured (does it not confine Flash)?
Aug
11
revised What prevents this session hijacking from occurring? (SMB/CIFS example)
deleted 123 characters in body
Jun
27
answered What prevents this session hijacking from occurring? (SMB/CIFS example)
May
3
awarded  Excavator
May
3
revised Security of passphrase-protected private key
Use the URL for the blog post, instead of the URL for the _source code_ of the blog post. I don't think we need to be that hardcore.
May
3
comment Security of passphrase-protected private key
Thanks. Also looks like OpenSSH have recognized this as a problem and started to offer a solution with bcrypt (although it's not the default yet): lwn.net/Articles/590870
May
3
suggested approved edit on Security of passphrase-protected private key
Feb
10
comment How do I ensure data encryption on Samba transmission on *NIX systems?
I think you found the answer, and the answer was no :). What you found was not implemented by MS, as requested in the question. "An innovation created by the Samba Team, Samba 3.2 has extended the CIFS/SMB protocol to allow transport encryption ... This extension to the CIFS/SMB protocol is open and available for other vendors to adopt."
Aug
11
awarded  Yearling
Jun
2
comment Why does this XSS vector work in svg but not in HTML?
If anyone else is wondering where this is talked about in the spec... the contents of <svg> are parsed as "foreign content". (<mathml> too). I feel unclean...
Mar
13
comment What is the next step of this file upload attack?
Maybe they were trying to upload a file named script.php.jpg. Some apache configurations would run this as a php script. See e.g. core.trac.wordpress.org/ticket/11122