Viewing profile — hxelk1

We needed to implement some changes in our code and it became a blog post. I'm sharing it in the hope that it might be marginally interesting :)

Careful, this won't stop systemctl from showing the full process command line in its output.

This isn't about systemd. OpenSSH is one of the most (if not the most) security-critical program in the distribution. Many systems run with just ssh enabled. That's why you don't m…

Couple of years ago, I noticed some weird Outlook headers on our internal company e-mails and decided to take a look. It turned out our company Outlook (or Exchange? who knows) mai…

I believe the xz backdoor relied on Debian patching OpenSSH with libsystemd to work.

The thing is, the first example doesn't handle many edge cases which normally arise and are a common source of bugs and security vulnerabilities. The second example doesn't suffer …

> you can actually declare startup dependencies and other useful relationships In theory, yes. In practice, I had a lot of trouble ordering things correctly in non-trivial cases. >…

I've spent a lot of time studying systemd alternatives. I believe the overall best design is Skarnet's s6, and that too includes a sudo-like program: https://skarnet.org/software/s…

From: krygorin4545 To: "1067708@bugs.debian.org" Cc: "sebastian@breakpoint.cc" , "bage@debian.org" Subject: Re: RFS: xz-utils/5.6.1-0.1 [NMU] -- XZ-format compression utilities Dat…

I tried to get my GP involved. Called the doctor's office, told the nurse about my endeavor and asked for a checkup (this was a week into the fast). The nurse basically told me tha…

Haha, yeah, the name is very confusing :)

About a year ago, I did two extended water fasts (24 and 16 days, about 8 weeks apart). I wanted to do a single 40 day one (just for kicks, to see if I last) but stopped after 24 d…

I feel your pain. I think software is certainly getting much more complex (because it can, not because it has to). Complexity comes with a cost. I hate when a mostly static website…

Thanks for suggestion! I did do several fire drills in the past, where I would change keys and wait for people to reach out. At the beginning of the semester, almost nobody would; …

I am teaching a Linux course and I would like to give some concrete examples of security incidents which involved an SSH MITM attack. To my surprise, I could not find anything onli…