3,239 reputation
1823
bio website blog.bstpierre.org
location United States
age 39
visits member for 3 years, 4 months
seen yesterday

Hey


Dec
16
comment Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter?
Are you asking if code running in a linux guest can break out of a VM to infect the windows host? See How secure are virtual machines? and Are there ways to protect the guest kernels at the hypervisor level?
Dec
16
answered Essential things to think about before outsourcing authentication with OpenID, OAuth, or SAML
Dec
14
comment Securing restricted shell environments
@Demelziraptor: I haven't used makejail. I haven't set up a jail recently but I do use a script to help set them up. (Can't remember where I got it, sorry.)
Dec
14
revised Securing restricted shell environments
advantage of jail
Dec
14
comment Securing restricted shell environments
Re: your update, you can take a look at what gitolite does with SSH_ORIGINAL_COMMAND. Gitolite relies heavily on ssh -- a single unix login account is shared by many users who only have access to a subset of git operations via ssh.
Dec
13
answered Securing restricted shell environments
Dec
12
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
a disgruntled ex-employee 5 minutes after getting fired leaving us no time to revoke his access -- your algorithm is wrong: first revoke access, then make the conversion to ex-employee
Dec
12
revised SIEM system, what are the benefits?
fix grammar and spelling
Dec
12
answered WORM media types
Dec
12
suggested suggested edit on SIEM system, what are the benefits?
Dec
10
comment How can I convert my encypted PGP secret key for use performing SSH authentication?
@JeffBurdges: web.monkeysphere.info
Dec
8
comment Can web sites detect whether you are using private browsing mode?
@SonnyOrdell: I think my answer is full of enough disclaimers that it's obvious the short answer is "no". As I mention in my comment/questions on the OP, I think the real answer depends on what the web site operator wants to do with the detection.
Dec
8
answered How dangerous is it that there are DNS entries for our domain that we did not register?
Dec
7
comment How can I keep my identity anonymous as a website owner/administrator?
+1 for the 2nd para: if you're using tor, you can increase the circuit length and use new circuits frequently (MaxCircuitDirtiness). +1 for the suggestion to firewall everything outbound except for the proxy port (this is valid for tor as well as SSH). -1 for the last para -- beware relying on, for example, Blogger.com for anonymity: Google operates in many countries and may be forced by a local government to hand over data (e.g. China).
Dec
7
comment How to guarantee that password is hashed on server-side?
@RoryAlsop: I like the contractual idea -- do you know of anyone putting language like this, say, in their privacy policy or TOU?
Dec
6
comment On-line cryptographically signed date/time?
Is there anything preventing you from operating a service that meets your exact specifications? You're willing to pay, and it seems likely that you could assemble it from freely available components and host it yourself. Linode (for example) runs about $200 a year; depending on your requirements you may be able to use a cheaper host.
Dec
6
comment How can I keep my identity anonymous as a website owner/administrator?
+1 but beware that you should only access your VPS, email, and registrar via HTTPS: TOR exit nodes could snoop your login credentials if you connect via plaintext.
Dec
6
answered Proxy vs. Firewall
Dec
6
answered Listing of DNS vulnerabilities
Dec
6
revised Listing of DNS vulnerabilities
fix grammar