meta user
network profile
| bio | website | blog.bstpierre.org |
|---|---|---|
| location | United States | |
| age | 38 | |
| visits | member for | 1 year, 11 months |
| seen | 10 hours ago | |
| stats | profile views | 65 |
Hey
|
Dec 19 |
answered | Killing IP connections who “spam” with requests |
|
Dec 19 |
comment |
Time server security error When the administrator makes a decision to jump the time, it happens under the control of the administrator. That's ok. When some unknown/untrusted server jumps the time, that's not good. The administrator can make a decision to do this when the system is not in use, or he can warn users, or he can force the system to reboot so that any affected applications will be restarted. |
|
Dec 19 |
answered | Time server security error |
|
Dec 19 |
revised |
How can I keep my programmer collegues informed about security issues? fix typos |
|
Dec 19 |
revised |
Policy requirements of Sarbanes-Oxley (SOX) fix copy/paste, add quoting |
|
Dec 18 |
answered | Secure PXE network OS installation |
|
Dec 18 |
revised |
Firefox Add-ons: “x” as Add-on name? embed image |
|
Dec 17 |
answered | Sniffing the sniffer |
|
Dec 16 |
comment |
Do I have to harden IE if I'm only using Firefox? Thanks for the tip on uninstalling. (I haven't run Windows at home in years, but as the resident geek some people expect me to know how to help with stuff like this.) Are annoying things going to happen to the users computer if I uninstall IE? I suspected that IE hardening would be needed but thought I'd ask... |
|
Dec 16 |
asked | Do I have to harden IE if I'm only using Firefox? |
|
Dec 16 |
comment |
Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter? I think your comment clarifies the question. I only linked those questions because they sounded similar to your original question. There's probably someone here who can give you a good answer. |
|
Dec 16 |
comment |
Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter? Are you asking if code running in a linux guest can break out of a VM to infect the windows host? See How secure are virtual machines? and Are there ways to protect the guest kernels at the hypervisor level? |
|
Dec 16 |
answered | Essential things to think about before outsourcing authentication with OpenID, OAuth, or SAML |
|
Dec 14 |
comment |
Securing restricted shell environments @Demelziraptor: I haven't used makejail. I haven't set up a jail recently but I do use a script to help set them up. (Can't remember where I got it, sorry.) |
|
Dec 14 |
revised |
Securing restricted shell environments advantage of jail |
|
Dec 14 |
comment |
Securing restricted shell environments Re: your update, you can take a look at what gitolite does with SSH_ORIGINAL_COMMAND. Gitolite relies heavily on ssh -- a single unix login account is shared by many users who only have access to a subset of git operations via ssh. |
|
Dec 13 |
answered | Securing restricted shell environments |
|
Dec 12 |
comment |
Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQLa disgruntled ex-employee 5 minutes after getting fired leaving us no time to revoke his access -- your algorithm is wrong: first revoke access, then make the conversion to ex-employee |
|
Dec 12 |
revised |
SIEM system, what are the benefits? fix grammar and spelling |
|
Dec 12 |
answered | WORM media types |
