New answers tagged

1

I answered this question over 10 years ago. Crikey. I have been linked to this question again recently, and I feel it is time to provide an updated answer. 10 years is not a long time, except in computing, where it is an eternity. I have also learned a significant amount in the intervening time. To address a comment left on this question: there's a ...


0

The sudoers timestamp file is only writable by root, so it cannot be modified by any normal user. However, a user that has root access (e.g. via sudo) can keep overwriting the timestamp file to prevent being prompted for the password again in future. This is only really relevant in a situation where an attacker gains access to an interactive terminal session ...


0

Yes. Flash memory chips can be removed and read, even though the phone does not boot. If the storage is encrypted, they will obviously only read the ciphertext, not the cleartext. It may possible provide access through a USB debugging environment as well.


1

As a general rule, you want to enable as few "sharing" features, and as little hardware access, as you can get away with. For gaming in particular you'll need to enable some (unless everything you want to run will be fine with software-only graphics), but you can try to keep it minimal. The more isolated the VM is from the host, the better. Of ...


1

You can imagine the the wireguard VPN as a exclusive network cable between your desktop and your server. It is plugged in into an additional network interface on both devices. So they can send packages to each other over that cable in both directions. I will try to answer you questions 4-7. The attacker does not realy need root acccess to access the VPN ...


1

I find this slightly ironic. Basically your expressed concern here is to guarantee maximum uptime for a system even after it is compromised. If you detect a breach, your concern should be to shut it down asap and cut off access for attackers. If uptime is important, then you need to think about a redundant architecture involving multiple servers. So I don't ...


Top 50 recent answers are included