163 reputation
3
bio website
location
age
visits member for 1 year, 10 months
seen 14 mins ago

Sep
3
comment Unix execute permission can be easily bypassed. Is it superfluous, or what's the intention behind it?
Note that shells (and execvp(), env, xargs, find -exec...) are meant to execute executable text files with no #! with sh. Actually that's the only way to execute scripts that is specified by POSIX and the Unix specification. Note that on Linux, . is still in front of the default PATH you get (for execvp()) when the PATH env var is not set.
Mar
4
revised How can I protect myself from this kind of clipboard abuse?
added 1 characters in body
Mar
4
comment How can I protect myself from this kind of clipboard abuse?
That safe-paste zsh plugin is safe with recent versions of xterm (since 292) in its default configuration since xterm now discards most control characters (including ESC). Note that it only works for the zsh prompt, not for other applications (though some applications like vim could also be extended to do something similar)
Mar
4
comment How can I protect myself from this kind of clipboard abuse?
With "+p, that assumes a version of vim built with X support, and that vim has access to the X display that holds the relevant X selection (for instance, it wouldn't work after a ssh (without -X/-Y)).
Mar
4
revised How can I protect myself from this kind of clipboard abuse?
added 3837 characters in body
Mar
4
comment How can I protect myself from this kind of clipboard abuse?
It seems it's vim, not xterm that turns C0 9B to 1B.
Mar
4
revised How can I protect myself from this kind of clipboard abuse?
added 85 characters in body
Mar
4
answered How can I protect myself from this kind of clipboard abuse?
Mar
2
comment How can I protect myself from this kind of clipboard abuse?
Note that xterm already removes all ASCII ctrl (0x0 to 0x31) except \b (unfortunately), \r, \n and \t (unless you tell it not to with the allowPasteControls resource).
Jan
31
comment Why do we ask for a user's existing password when changing their password?
Why do you say it's different from Unix? That's exactly what Gnome (and probably KDE and OS/X as well) do with their key rings and/or encrypted directories (as PAM modules).
Jan
15
awarded  Editor
Jan
15
revised How do you build a secure web application that is also COPPA compliant?
typo, COPPA only applies in the US (AFAICT)
Jan
15
suggested suggested edit on How do you build a secure web application that is also COPPA compliant?
Nov
21
awarded  Teacher
Nov
21
comment What's the secure way to change UNIX permissions on a harcoded file often?
See the O_NOFOLLOW flag to open(2) as well (on FreeBSD and Linux at least) to fail if the file is the symlink and avoid having to check for race conditions.
Nov
21
answered Why do we ask for a user's existing password when changing their password?
Nov
21
awarded  Supporter