Viewing profile — kro

It does not even require the PoW thing Anubis does. I've setup a simple logic that just: Checks for existence of a specific static cookie, if it does not exist, output a small page…

I understand that most people don't use it and indeed rely on tofu, but the statement is not absolutely correct. ssh server keys can be authenticated using (the DNSSEC "CA" system …

Only 1.31.0 and 1.31.1 are affected.

These commits [1] are related to the issue. I am not too familiar with the code, but it appears nginx manages/closes streams in a pool at times the attacker cannot control, and dur…

I did that for a while because of compatibility issues with a newer laptop, it works but generally if there is no reason it's way easier to stay with the provided packages. Compili…

mysql/maria also lets you turn off/down the isolation level for queries if you know the guarantees aren't needed, to speed things up. I think postgres does not have that option.

I've been receiving loads of spam from google MX servers lately until blocking all mails with X-Google-Group-Id headers. I don't know how it's possible, the contents were 100% spam…

You are correct. Reminds me, we once got a letter by a German government body requesting some data exports from our company, and to upload them on findrive-ni.de It turned out to b…

That also often shoots you as when json_encoding it only becomes an array when ordered "correctly" (numeric 0-based keys without gaps), otherwise an object. So to be safe you gener…

Sounds good - which software supports this? Specifically I'd prefer if it would do a composite key derivation in-time rather than "just a pw prompt but TPM has the full key"

Ubuntu also released TPM based FDE a few versions ago. I had these thoughts then and decided against using it. Typing my passphrase on boot is muscle memory and gives me simple sec…

No remotely reachable vuln should be taken lightly. At the moment though, the preconditions look odd. I've been using nginx in various constellations for 10 years and never once co…

However, some privs can be gained in namespaces/unshare.

It says coordinated distro release today, and I've received a notice earlier today but that does not include the CVE number. That's confusing / does not seem very coordinated to re…

Next easy attack vector is (non-rootless) docker run with rootfs mount, many are in docker group even when sudo is protected. Also, most sensitive data is in the user scope anyways…

So far all the information suggested to disable esp and rxrpc modules. This bulletin suggest that more modules are necessary for complete mitigation

Containers, even with root user, are often stripped of these capabilities unless --privileged

VPN usage increased, but how to they draw the conclusion that this is children. I think it's more likely that adults are using VPNs to not have to deal with the ID process. I would…

CAP_NET/SYS_ADMIN is required for this. So this would be "not as bad" as the others.

It's scary to think that some day it will be more than a local attack vector. I don't want to imagine the fallout from a remote rce via tcp/ip.

These copyfail exploits allow an unprivileged (daemon/app) user (not in sudoers) to get root without interaction from the original system maintainer. It's quite different from PATH…

Maybe it would be reasonable for sysadmins to proactively whitelist used / block all exotic unused modules that are not needed in their system configuration. This would reduce the …