Reputation
1,816
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
9 13
Newest
 Yearling
Impact
~172k people reached

  • 0 posts edited
  • 0 helpful flags
  • 119 votes cast
Feb
25
comment In light of the glibc DNS vulnerability, why aren't Linux distros updating install images?
You are supposed to patch, harden, and test your boxes before putting them into production. If your idea of security is to install Ubuntu and that's it, then no amount of keeping up with patches by the vendor is going to help.
Feb
2
answered Banner grabbing OpenSSL versions with OpenSSL
Nov
18
awarded  Yearling
Jul
21
comment Apache Server Hardening
@sa289 good catch, updated links
Jul
21
revised Apache Server Hardening
Updated links, DISA restructured their website
Jul
21
awarded  Caucus
May
8
answered Is it safe to trust a Docker container?
Feb
3
comment GHOST bug: is there a simple way to test if my system is secure?
I used the php one on SUSE 11SP3, and I saw no segfault before or after patching. Any ideas?
Jan
30
comment GHOST bug: is there a simple way to test if my system is secure?
lsof +c0 -f -- /usr/lib64/libc-*.so | grep "(deleted)$" a bit more precise, shows you full names of processes, and looks for linking to files that were deleted.
Jan
29
awarded  Notable Question
Dec
9
awarded  Guru
Nov
18
awarded  Yearling
Jun
16
answered Tools to test all-around hardness of a Unix installation?
May
23
comment encryption for short messages
No 'problem' just trying to see how I can make it better/faster/not set myself up for any crypto hackery that might be a result of not having longer messages.
May
23
asked encryption for short messages
Apr
22
comment Find out what Linux software is trying to phone home
watch is much nicer than while true; do...done
Feb
26
awarded  Good Answer
Jan
23
comment Should I decode a base64 password before hashing for storage?
I meant it for the attacker snooping on the transmission, if you see a string that looks like base64, it's trivial to extract end decode it. All that happening before he hashes things.
Jan
23
comment Should I decode a base64 password before hashing for storage?
Base64 is really easy to recognize too, the format instantly gives away what you'd want to try on it to decode it.
Jan
10
awarded  Popular Question