3,154 reputation
1619
bio website blog.bstpierre.org
location United States
age 38
visits member for 2 years, 10 months
seen Dec 19 '13 at 15:15

Hey


Dec
19
revised Killing IP connections who “spam” with requests
clean up filter comment
Dec
19
comment Killing IP connections who “spam” with requests
and: serverfault.com/questions/310599/…
Dec
19
comment Killing IP connections who “spam” with requests
See also: serverfault.com/questions/208341/…
Dec
19
answered Killing IP connections who “spam” with requests
Dec
19
comment Time server security error
When the administrator makes a decision to jump the time, it happens under the control of the administrator. That's ok. When some unknown/untrusted server jumps the time, that's not good. The administrator can make a decision to do this when the system is not in use, or he can warn users, or he can force the system to reboot so that any affected applications will be restarted.
Dec
19
answered Time server security error
Dec
19
revised How can I keep my programmer collegues informed about security issues?
fix typos
Dec
19
revised Policy requirements of Sarbanes-Oxley (SOX)
fix copy/paste, add quoting
Dec
18
answered Secure PXE network OS installation
Dec
18
revised Firefox Add-ons: “x” as Add-on name?
embed image
Dec
17
answered Sniffing the sniffer
Dec
16
comment Do I have to harden IE if I'm only using Firefox?
Thanks for the tip on uninstalling. (I haven't run Windows at home in years, but as the resident geek some people expect me to know how to help with stuff like this.) Are annoying things going to happen to the users computer if I uninstall IE? I suspected that IE hardening would be needed but thought I'd ask...
Dec
16
asked Do I have to harden IE if I'm only using Firefox?
Dec
16
comment Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter?
I think your comment clarifies the question. I only linked those questions because they sounded similar to your original question. There's probably someone here who can give you a good answer.
Dec
16
comment Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter?
Are you asking if code running in a linux guest can break out of a VM to infect the windows host? See How secure are virtual machines? and Are there ways to protect the guest kernels at the hypervisor level?
Dec
16
answered Essential things to think about before outsourcing authentication with OpenID, OAuth, or SAML
Dec
14
comment Securing restricted shell environments
@Demelziraptor: I haven't used makejail. I haven't set up a jail recently but I do use a script to help set them up. (Can't remember where I got it, sorry.)
Dec
14
revised Securing restricted shell environments
advantage of jail
Dec
14
comment Securing restricted shell environments
Re: your update, you can take a look at what gitolite does with SSH_ORIGINAL_COMMAND. Gitolite relies heavily on ssh -- a single unix login account is shared by many users who only have access to a subset of git operations via ssh.
Dec
13
answered Securing restricted shell environments