3,229 reputation
1822
bio website blog.bstpierre.org
location United States
age 39
visits member for 3 years, 2 months
seen Aug 12 at 3:27

Hey


Dec
20
answered How to see whether the pcap contains RTP traffic?
Dec
20
revised How can I keep my programmer collegues informed about security issues?
formatting
Dec
20
revised Why do we authenticate by prompting a user to enter both username and password? Does prompting the password only suffice?
fix typo
Dec
20
comment Are passwordless SSH logins more secure?
Possibly of interest: gnome-keyring ssh agent timeout -- make the keyring "forget" your password when the screensaver kicks on. You can also do ssh-add -t3600 to make ssh-agent drop your key after an hour.
Dec
19
comment Killing IP connections who “spam” with requests
@JeffFerland: I don't think so: the regex in the filter file will only match the URL(s) that you specify. So an innocent user requesting 200 images+scripts+css all at once won't be affected, just the malicious request for the same "content.html" 10 times in 30 seconds (or whatever N times in M seconds the OP wants to set as a bound). Just as long as the filter file doesn't specify a broad wildcard to match all the embedded content that an innocent user is going to pull on each page load.
Dec
19
revised Killing IP connections who “spam” with requests
clean up filter comment
Dec
19
comment Killing IP connections who “spam” with requests
and: serverfault.com/questions/310599/…
Dec
19
comment Killing IP connections who “spam” with requests
See also: serverfault.com/questions/208341/…
Dec
19
answered Killing IP connections who “spam” with requests
Dec
19
comment Time server security error
When the administrator makes a decision to jump the time, it happens under the control of the administrator. That's ok. When some unknown/untrusted server jumps the time, that's not good. The administrator can make a decision to do this when the system is not in use, or he can warn users, or he can force the system to reboot so that any affected applications will be restarted.
Dec
19
answered Time server security error
Dec
19
revised How can I keep my programmer collegues informed about security issues?
fix typos
Dec
19
revised Policy requirements of Sarbanes-Oxley (SOX)
fix copy/paste, add quoting
Dec
18
answered Secure PXE network OS installation
Dec
18
revised Firefox Add-ons: “x” as Add-on name?
embed image
Dec
17
answered Sniffing the sniffer
Dec
16
comment Do I have to harden IE if I'm only using Firefox?
Thanks for the tip on uninstalling. (I haven't run Windows at home in years, but as the resident geek some people expect me to know how to help with stuff like this.) Are annoying things going to happen to the users computer if I uninstall IE? I suspected that IE hardening would be needed but thought I'd ask...
Dec
16
asked Do I have to harden IE if I'm only using Firefox?
Dec
16
comment Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter?
I think your comment clarifies the question. I only linked those questions because they sounded similar to your original question. There's probably someone here who can give you a good answer.
Dec
16
comment Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter?
Are you asking if code running in a linux guest can break out of a VM to infect the windows host? See How secure are virtual machines? and Are there ways to protect the guest kernels at the hypervisor level?