static_cast

6 ms·

1.
by static_cast 15y ago
I remember around 2001 - when he started his digital "Jihad" against Bin Laden - his web server was hacked several times with a public FreeBSD telnetd remote root exploit. I won't deny that you have to give him some respect for being able t
2.
by static_cast 15y ago
I don't know. I'm just on the end-user side. Just a guess from my (pretty limited) understanding of the issue: The grsecurity[1] patch includes PaX[2] that can break a lot of software. e.g. Java and X11 and there are sometimes other unwante
3.
by static_cast 15y ago
I'd love to see up to date stable grsecurity kernel repositories for the major distributions (ubuntu, debian, rhel/centos) that provide patched versions of the distribution kernel. You can configure most of grsecurity via the sysctl interfa
4.
by static_cast 15y ago
Thanks. I guess It's finally time for me to move every machine to a grsecurity kernel.
5.
by static_cast 15y ago
I know. I want to know if someone with a kernel >=2.6.39 and applied grsecurity patch can successfully use this exploit or if grsecurity protects from this exploit.
6.
by static_cast 15y ago
Is a grsecurity[1] patched kernel safe? I only have a machine with a 2.6.32-grsec kernel, so I can't test the exploit. In the features list they state: /proc/pid filedescriptor/memory protection But I'm unaware how they implemented
7.
by static_cast 15y ago
I know exactly what you are talking about. Following a plan can be hard. If you don't have clean socks anymore try to include that into your plan. Say 30min household stuff... nobody will ever see my plan. It is personal, full of probably q
8.
by static_cast 15y ago
> It stops our mail server from being used as an open relay though? From outside of your network yes. If one of the computers inside your network is infected your mail-server will happily deliver the spam mails. > How does blocking
9.
by static_cast 15y ago
I'm quite new to Steve Pavlina writings. So I've checked with Wikipedia to get an idea on his claims. He already got college credits from high school and studying at Berkeley, this important detail is nowhere found in the article. I've also
10.
by static_cast 15y ago
That's pretty sound advice. However a lot of scripts won't work if you disable exec and co. some other random ideas for php-security: If you have to enable some form of option to exec binaries be aware that open_basedir is useless now, beca
11.
by static_cast 15y ago
I'm sure a vanilla linux-distribution is as easy an target as a windows box, if not even easier. But why don't they use some hardened (grsecurity,selinux) kernel + http://linux-ima.sourceforge.net/ + a default forbid MAC policy + remote l
12.
Hetzner (a huge german server provider) got hacked, customer-data stolen(hetzner-status.de)
4 points by static_cast 15y ago|0 comments
13.
by static_cast 15y ago
Seneca Letters to Lucillus http://en.wikipedia.org/wiki/Epistulae_morales_ad_Lucilium
14.
by static_cast 15y ago
Thanks for your great reply. I've looked into mediation and I should start now doing it. Nice to hear that it helps you. I really guess I have to look after my feelings. Something went wrong along the way and now I'm struggling.
15.
by static_cast 15y ago
> The insidious thing about this is just how effective it is (if you are good at it) Yes, but not if you want to learn something. Then it is disastrous because you skip the "actually solving something" part.
16.
by static_cast 15y ago
No I think there isn't. It is effective and often there is probably no other even mildly realistic way to solve some problem in time (e.g. a bug that is reported in the software bug-tracker) I missed to make a concise point with that (conce
17.
by static_cast 15y ago
Hardcore procrastinator here. Reading good articles like that won't change anything. That's the bitter truth. At least this is the case for me, and probably some other people on the internet. I'm nowhere near to have myself in full control
18.
by static_cast 15y ago
If I'd like to "hack" a LAMP-Server I certainly wouldn't start by attacking Apache or PHP. The biggest attack vector are outdated scripts. Once an attacker has access to PHP, he basically has a normal user login. Running PHP as the apache u
19.
by static_cast 15y ago
I don't think this is true. Apache with mpm_worker and fastcgi for python/php should perform on a typical dedicated server like nginx till the network is saturated. you also have to consider that .htaccess files are quite cpu intensive beca
20.
by static_cast 15y ago
I think it is a little bit different: Fortran and COBOL are implementations of imperative programming languages. The ideas did not change. You still use while, for, if constructs in your ruby/python/java code. only another level of abstract
21.
by static_cast 15y ago
If you use ngix + php-fpm: the nginx fastcgi_cache module http://wiki.nginx.org/HttpFcgiModule#fastcgi_cache is really neat and a lot faster than the full-page caching plugins. I also found that an object cache does improve performance a
22.
by static_cast 15y ago
This is probably a scam: http://esowatch.com/en/index.php?title=Focardi-Rossi_Energy-...
23.
by static_cast 15y ago
I'm not sure if the following links refer to the same thorium architecture but in Germany there was a test-reactor and several rather hard to solve problems appeared http://en.wikipedia.org/wiki/THTR-300 http://juwel.fz-juelich.de:8080/d
24.
by static_cast 15y ago
I agree on your conclusion. After re-reading your original post and my answer It seems that I misunderstood some of your points. After skimming through the guide again, I also found that certain security related aspects are not included. Th
25.
by static_cast 15y ago
This guide is written by the NSA so it is reasonable for them to be paranoid by default. > 1.1.2 Minimize Software to Minimize Vulnerability I agree on yum. If the attacker has root and can run yum. It is too late. In regards to user mo