meta user
network profile
| bio | website | |
|---|---|---|
| location | Moscow, Russia | |
| age | ||
| visits | member for | 7 months |
| seen | 10 hours ago | |
| stats | profile views | 11 |
|
Apr 1 |
awarded | Nice Answer |
|
Mar 31 |
answered | When hashing passwords, is it ok to use the hashed password as the salt? |
|
Mar 12 |
awarded | Necromancer |
|
Mar 12 |
revised |
Whats the best way to make my internet traffic anonymous? Added a link to Tor website. Totally forgot that some people don't know what it is. |
|
Feb 10 |
comment |
Good Practice: Storing Passwords in general See security.stackexchange.com/questions/211/… |
|
Jan 21 |
answered | When hashing passwords, is it okay to store the algorithm used right there in the database? |
|
Dec 31 |
comment |
Passive and active attacks via X11. Is Wayland any better? blogs.gnome.org/wjjt/2012/03/14/looking-around-wayland is the xeyes story. I couldn't find anything about it in official documentation right now. |
|
Dec 29 |
awarded | Commentator |
|
Dec 29 |
comment |
What's the secure way to change UNIX permissions on a harcoded file often? "fstat() the first component of the path which might be a symlink" - I assume you mean "stat()" here. That aside, thanks a lot, great answer! |
|
Nov 27 |
comment |
Whats the best way to make my internet traffic anonymous? LiveCDs are not a great idea because they receive no security updates. Your system may become vulnerable in a few days. |
|
Nov 27 |
awarded | Critic |
|
Nov 21 |
awarded | Student |
|
Nov 21 |
awarded | Scholar |
|
Nov 21 |
accepted | What's the secure way to change UNIX permissions on a harcoded file often? |
|
Nov 21 |
comment |
What's the secure way to change UNIX permissions on a harcoded file often? I'm trying to signal .desktop file visibility via TryExec= fields in them, standards.freedesktop.org/desktop-entry-spec/latest/… I've tried a bunch of other solutions but this seems to be the simplest even for more complex cases like checking several conditions, etc |
|
Nov 21 |
comment |
What's the secure way to change UNIX permissions on a harcoded file often? In fact I'm merely changing it for executability checks in .desktop file handlers. I know the actual executability doesn't depend on that bit. The problem with the chmod()'s is that they set other properties such as readability in addition to flipping the executability bits. But thanks for the tip anyway! |
|
Nov 21 |
comment |
What's the secure way to change UNIX permissions on a harcoded file often? Assuming the system already runs something like AppArmor, SELinux or TOMOYO, can my daemon be the cause of privilege escalation? It seems that way #1 allows converting the privilege to create symlinks as root into privilege to chmod things as root, doesn't it? |
|
Nov 21 |
comment |
Passive and active attacks via X11. Is Wayland any better? In fact Wayland is better, it doesn't allow snooping on input to other applications, including mouse position isolation. For example, xeyes don't work in wayland without heavily patching the whole thing (though one dev did exactly that just for fun). I'm sure keylogging is disallowed too. |
|
Nov 21 |
comment |
Secure Linux Desktop As for search engines, StartPage has somewhat outdated data, so I recommend using ixquick.com (aggregated search, same technology) or duckduckgo.com (independent privacy-oritented search engine) or use an SSL'd Seeks instance (seeks-project.info/site) or, best of all, run a Seeks node locally. |
|
Nov 21 |
comment |
Secure Linux Desktop My $0.02: Use opendns.com/technology/dnscrypt or dnscurve.org instead of DNS-over-HTTPS. DNSCrypt is faster and probably more secure, DNSCurve is also faster and even more secure but it's harder to find a server for it. |
