3,509 reputation
1926
bio website blog.bstpierre.org
location United States
age 40
visits member for 4 years
seen Feb 11 at 2:36

Hey


Dec
17
answered Sniffing the sniffer
Dec
16
comment Do I have to harden IE if I'm only using Firefox?
Thanks for the tip on uninstalling. (I haven't run Windows at home in years, but as the resident geek some people expect me to know how to help with stuff like this.) Are annoying things going to happen to the users computer if I uninstall IE? I suspected that IE hardening would be needed but thought I'd ask...
Dec
16
asked Do I have to harden IE if I'm only using Firefox?
Dec
16
comment Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter?
I think your comment clarifies the question. I only linked those questions because they sounded similar to your original question. There's probably someone here who can give you a good answer.
Dec
16
comment Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter?
Are you asking if code running in a linux guest can break out of a VM to infect the windows host? See How secure are virtual machines? and Are there ways to protect the guest kernels at the hypervisor level?
Dec
16
answered Essential things to think about before outsourcing authentication with OpenID, OAuth, or SAML
Dec
14
comment Securing restricted shell environments
@Demelziraptor: I haven't used makejail. I haven't set up a jail recently but I do use a script to help set them up. (Can't remember where I got it, sorry.)
Dec
14
revised Securing restricted shell environments
advantage of jail
Dec
14
comment Securing restricted shell environments
Re: your update, you can take a look at what gitolite does with SSH_ORIGINAL_COMMAND. Gitolite relies heavily on ssh -- a single unix login account is shared by many users who only have access to a subset of git operations via ssh.
Dec
13
answered Securing restricted shell environments
Dec
12
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
a disgruntled ex-employee 5 minutes after getting fired leaving us no time to revoke his access -- your algorithm is wrong: first revoke access, then make the conversion to ex-employee
Dec
12
revised SIEM system, what are the benefits?
fix grammar and spelling
Dec
12
answered WORM media types
Dec
12
suggested approved edit on SIEM system, what are the benefits?
Dec
10
comment How can I convert my encypted PGP secret key for use performing SSH authentication?
@JeffBurdges: web.monkeysphere.info
Dec
8
comment Can web sites detect whether you are using private browsing mode?
@SonnyOrdell: I think my answer is full of enough disclaimers that it's obvious the short answer is "no". As I mention in my comment/questions on the OP, I think the real answer depends on what the web site operator wants to do with the detection.
Dec
8
answered How dangerous is it that there are DNS entries for our domain that we did not register?
Dec
7
comment How can I keep my identity anonymous as a website owner/administrator?
+1 for the 2nd para: if you're using tor, you can increase the circuit length and use new circuits frequently (MaxCircuitDirtiness). +1 for the suggestion to firewall everything outbound except for the proxy port (this is valid for tor as well as SSH). -1 for the last para -- beware relying on, for example, Blogger.com for anonymity: Google operates in many countries and may be forced by a local government to hand over data (e.g. China).
Dec
7
comment How to guarantee that password is hashed on server-side?
@RoryAlsop: I like the contractual idea -- do you know of anyone putting language like this, say, in their privacy policy or TOU?
Dec
6
comment On-line cryptographically signed date/time?
Is there anything preventing you from operating a service that meets your exact specifications? You're willing to pay, and it seems likely that you could assemble it from freely available components and host it yourself. Linode (for example) runs about $200 a year; depending on your requirements you may be able to use a cheaper host.