Viewing profile — static_cast

I remember around 2001 - when he started his digital "Jihad" against Bin Laden - his web server was hacked several times with a public FreeBSD telnetd remote root exploit. I won't …

I don't know. I'm just on the end-user side. Just a guess from my (pretty limited) understanding of the issue: The grsecurity[1] patch includes PaX[2] that can break a lot of softw…

I'd love to see up to date stable grsecurity kernel repositories for the major distributions (ubuntu, debian, rhel/centos) that provide patched versions of the distribution kernel.…

Thanks. I guess It's finally time for me to move every machine to a grsecurity kernel.

I know. I want to know if someone with a kernel >=2.6.39 and applied grsecurity patch can successfully use this exploit or if grsecurity protects from this exploit.

Is a grsecurity[1] patched kernel safe? I only have a machine with a 2.6.32-grsec kernel, so I can't test the exploit. In the features list they state: /proc/pid filedescriptor/mem…

I know exactly what you are talking about. Following a plan can be hard. If you don't have clean socks anymore try to include that into your plan. Say 30min household stuff... nobo…

> It stops our mail server from being used as an open relay though? From outside of your network yes. If one of the computers inside your network is infected your mail-server will …

I'm quite new to Steve Pavlina writings. So I've checked with Wikipedia to get an idea on his claims. He already got college credits from high school and studying at Berkeley, this…

That's pretty sound advice. However a lot of scripts won't work if you disable exec and co. some other random ideas for php-security: If you have to enable some form of option to e…

I'm sure a vanilla linux-distribution is as easy an target as a windows box, if not even easier. But why don't they use some hardened (grsecurity,selinux) kernel + http://linux-ima…

Seneca Letters to Lucillus http://en.wikipedia.org/wiki/Epistulae_morales_ad_Lucilium

Thanks for your great reply. I've looked into mediation and I should start now doing it. Nice to hear that it helps you. I really guess I have to look after my feelings. Something …

> The insidious thing about this is just how effective it is (if you are good at it) Yes, but not if you want to learn something. Then it is disastrous because you skip the "actual…

No I think there isn't. It is effective and often there is probably no other even mildly realistic way to solve some problem in time (e.g. a bug that is reported in the software bu…

Hardcore procrastinator here. Reading good articles like that won't change anything. That's the bitter truth. At least this is the case for me, and probably some other people on th…

If I'd like to "hack" a LAMP-Server I certainly wouldn't start by attacking Apache or PHP. The biggest attack vector are outdated scripts. Once an attacker has access to PHP, he ba…

I don't think this is true. Apache with mpm_worker and fastcgi for python/php should perform on a typical dedicated server like nginx till the network is saturated. you also have t…

I think it is a little bit different: Fortran and COBOL are implementations of imperative programming languages. The ideas did not change. You still use while, for, if constructs i…

If you use ngix + php-fpm: the nginx fastcgi_cache module http://wiki.nginx.org/HttpFcgiModule#fastcgi_cache is really neat and a lot faster than the full-page caching plugins. I a…

This is probably a scam: http://esowatch.com/en/index.php?title=Focardi-Rossi_Energy-...

I'm not sure if the following links refer to the same thorium architecture but in Germany there was a test-reactor and several rather hard to solve problems appeared http://en.wiki…

I agree on your conclusion. After re-reading your original post and my answer It seems that I misunderstood some of your points. After skimming through the guide again, I also foun…

This guide is written by the NSA so it is reasonable for them to be paranoid by default. > 1.1.2 Minimize Software to Minimize Vulnerability I agree on yum. If the attacker has roo…