Reputation
1,981
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
1 7 17
Newest
 Yearling
Impact
~119k people reached

Mar
10
comment Is it possible to fake incoming IP?
@GdD, But not wrong,... Answer edited.
Mar
10
comment Is it possible to fake incoming IP?
If you use mail config to whitelist IP, this could be faked by mail header forgery. If you use such a firewall to block ip and whitelist, this could be ok, but from there. non authorized IP could not connect your mail server, even for authentication.
Mar
4
comment How do I know if my computer is being used for a botnet-based DDoS attack?
Wow! +1 after approx 16 months... Not well paid, as I know this tool not completely dead... (I've seen a suspicious log on one of my servers, last week. Download a modified version, but same script, modified, but using same methods, my killer will surely find them.)
Feb
25
comment Unknown process on my ubuntu machine communicating over multiple ports with UDP proto
Let us continue this discussion in chat.
Feb
25
comment Unknown process on my ubuntu machine communicating over multiple ports with UDP proto
Yes this is suspicious! Search for entries concerning 69.171.230.114! string _%DB%B5_%DB%B5 seem designed to bug your script. See /users and how this interact with DB. Maybe you have to sanitize inputs when /user in invocated.
Feb
24
comment Unknown process on my ubuntu machine communicating over multiple ports with UDP proto
So browse your access.log files, search for ip with a lot of access just before Feb 4 18:04 and upto Feb 4 18:10 but few or no more after... So you could see which script was accessed and how.
Feb
24
comment Unknown process on my ubuntu machine communicating over multiple ports with UDP proto
Answer edited!!
Feb
24
comment Unknown process on my ubuntu machine communicating over multiple ports with UDP proto
Well, postgresql is clearly the way of input of this kit!
Feb
24
comment Unknown process on my ubuntu machine communicating over multiple ports with UDP proto
There is no cipher;-) select wait for an input, recv recieve an input.. and so on. If you find read or write, you may see something between double quotes...
Dec
21
comment IPtables accepting SMTP without being configured?
Instead of adding DROP as last rule, use default policy (-P switch)!
Nov
2
comment Wordpress: a Virus detection plugin is necessary?
I've updated my answer, but please avoid editing question once answer is posted. Prefer to ask another question!!
Jun
14
comment Did this ShellShock exploit work?
... Go to tldp.org, in Guides index, search for System Administrators! Enjoy reading!
Jun
14
comment Did this ShellShock exploit work?
You could run who for looking about user connected to your server.
Jun
14
comment Does GRE Tunneling support the Websocket Protocol?
WebSocket is not under HTTP, because of HTTP limitation WebSocket is a sibling protocole, linked to HTTP for javascript applications. So WebSocket is a TCP protocol, as you rightly said: which is, like everything, transported by GRE.
May
5
comment Managing multiple SSH private keys for a team
Hem yes, even if you need to keep root access without password for administrative scripts, having separated account for each sysadmin is mostly a good practice. Of couse, each sysadmin who have access to sudo could install his own backdoor. You have to keep this in mind.
May
5
comment Managing multiple SSH private keys for a team
Read The Linux System Administrator's Guide for further docs.
Mar
22
comment Easy explanation of SSL client certificates for a developer
You must keep in mind user is stupid enough! And no: they could even be already hacked and mitm authority cert already pushed in his trusted list... The real problem is that your server will register mitm client cert!
Mar
22
comment Does Wifi encryption create a private tunnel between the adapter and the accesspoint?
I want to answer "No", but.. Body must be at least 30 characters...
Mar
10
comment uploading photos to cloud from an infected device
Is the cloud already virus free?
Feb
5
comment Linux-based Turla trojan
I've edited my answer, adding a checklist. Please have a look and feel free to comment.