Reputation
36,343
Next tag badge:
145/100 score
17/20 answers
Badges
7 66 139
Impact
~2.1m people reached

21h
comment Can a root user inside a Docker/LXC break the security of the whole system?
Worth noting that with Docker 1.10+ and User namespacing, the root user inside a container is no longer the root user outside of the container. whilst that reduces the risk of breakout, it also prevents this scenario of loading a kernel module as the root user inside the container wouldn't have the appropriate rights outside the container.
21h
comment Would CVE-2016-0728 affect Docker?
FWIW I think that Docker 1.10 with seccomp filters may not fall to this as it restricts access to the syscalls used by the exploit.
Feb
7
comment Unknown ports shown on Nmap scan…and other strange behavior
with the nmap scan was your intention to scan your localhost? as that's what scanning 0.0.0.0 will do (although it's more usual to do 127.0.0.1 for that)
Jan
28
comment What to do if meterpreter get Caught?
Possible duplicate of Metasploit Meterpreter alternatives That Question and answer have some good information about alternatives to meterpreter to handle A-V evasion...
Jan
23
comment Can I get SSL certificates for my OpenPGP key?
the closest you're likely to find to this is either keybase.io (key tied to social media identities and/or ownership of a website) or S/MIME certificates which are issued by a CA
Jan
21
comment Is the BBC’s advice on choosing a password sensible?
I'm going to go against the consensus and disagree that it makes cracking passwords easier. "easier" is a relative term that implies that currently users are choosing good passwords and if they follow this scheme they'll be worse. That's objcectively not true, most users choose passwords which are much more predictable than the ones generated by this scheme. This scheme doesn't provide "good" passwords, but it may provide "better" passwords than the majority of users currently choose...
Jan
19
comment Why is it harder to brute force an iphone than a zip-file?
The answer to your question is here blog.cryptographyengineering.com/2014/10/…
Jan
10
comment Why java.sql.ResultSet.getString is an Information Leakage vulnerability
FWIW it's important to note that I would be very careful before using LAPSE+ for anything, the last release I can see is 2.8.1 from 2011 and the mailing list shows no activity since 2013
Dec
17
comment Are there any statistics about packet filtering to prevent IP spoofing on the internet?
bcp38.info/index.php/Main_Page would likely be a good place to get info about this kind of thing..
Dec
13
comment Samsung SSD 850 EVO. Best way to protect personal data against thiefs
I wouldn't necessarily assume that the poster on Toms Hardware is correct. He/She is suggestiing that they can change the HDD password on a samsung SSD by just plugging it into another PC that the attacker has access to...
Dec
13
comment Docker as a sandbox for untrusted code
sorry but you should have a citation for "container root also has host root privileges" . it's not trivial or indeed always possible to escape a containerized setup
Dec
11
comment Docker containers, environment variables, and databases
What specific images are you thinking about which are "official" but use a linked container setup with Environment variable passing? My expectation is that they'd fall under scenario 2 above "they're aware of the risks but don't think it's serious in their architecture" The nature of docker linked containers is that the database or back end server will likely be dedicated to the front-end app. As such all the data in the linked container is likely to already be accessible to the front end app, so access to the root password doesn't really provide a lot of additional access to an attacker.
Dec
11
comment How would a resourceful government block Tor?
FWIW today the French prime minister has stated that TOR will not be banned. dailydot.com/politics/france-tor-wifi-pm-no-ban
Dec
9
comment Can one Bypass a Web Proxy by using the Host File?
and thus it's possible that the connection will work depending on the configuration of the network/devices. that said in my experience commercial proxy products which block content tend to work based on host/domain names and not IP addresses, as the underlying IP address are subject to change and it would be a pain to maintain if it was IP addresses.
Dec
9
comment Can one Bypass a Web Proxy by using the Host File?
and if we assign a different host name to that IP address, how does the proxy know to block it? When it sees the request if all it see sees is the IP address, then given that we know traffic to the IP address gets there ok....
Dec
9
comment Can one Bypass a Web Proxy by using the Host File?
@RedGrittyBrick also worth noting that the question specifies that it's telnet to port 80 that works ok, so we can conclude that at some level the web server port is accessible to the client.
Dec
9
comment Can one Bypass a Web Proxy by using the Host File?
err you commentors may want to consider the line about telnet to the web server IP address being successful...
Dec
9
comment Can one Bypass a Web Proxy by using the Host File?
In the question it says that a telnet connection to port 80 on the target web server is successful...
Dec
9
comment Can one Bypass a Web Proxy by using the Host File?
In the question it says that a telnet to the IP address of the blocked web site is successful, do you think that may be a factor in whether this would or wouldn't work?
Dec
2
comment What information can my ISP see when I visit a website?
just to clarify as one of your examples does not use SSL, in that case they can see everything that you send/receive, unless google redirects to an SSL encrypted connection and even then they'll get the initial request in full.