Ded7xSEoPKYNsDd

23 ms·

211.
by Ded7xSEoPKYNsDd 12y ago
TLS is just a new name for SSL from version 3.1 onwards. It's much more secure then those older SSL versions. STARTTLS, a protocol used to negotiate SSL/TLS in some plain text protocols, is problematic if it isn't enforced. S
212.
by Ded7xSEoPKYNsDd 12y ago
This is just an idea, but how about adding a function to your allocator that turns all future deallocations into a no-op?
213.
by Ded7xSEoPKYNsDd 12y ago
Yes, if you require a user-specific random token in the request, the exploit doesn't work. But that's independent of GET/POST and not what you said in your earlier post.
214.
by Ded7xSEoPKYNsDd 12y ago
It's not so hard to build a form and submit it automatically with JavaScript in order to get a user's browser to do a POST request to any URL you want.
215.
by Ded7xSEoPKYNsDd 12y ago
Yes. The stuff on addons.mozilla.org is checked by real humans.
216.
by Ded7xSEoPKYNsDd 12y ago
Full ASLR on Linux requires compiling with non-standard options (-pie -fPIE). Linux distributions seem to do this only on a case by case basis. They should've enabled these flags for most at-risk software by now, but I'm not convi
217.
by Ded7xSEoPKYNsDd 12y ago
The point is: Omnibox in Chrome sends every key stroke. The Awesomebar in Firefox doesn't send anything to Google until you initiate a search.
218.
by Ded7xSEoPKYNsDd 12y ago
All web servers I've seen open the key files before dropping root privileges. These should never be readable by anything but root.
219.
by Ded7xSEoPKYNsDd 12y ago
On my personal machines, I also setup a cronjob to automatically install updates. There's a small risk of breakage (I had one in 5 years), but I prefer that over a bill like op's.
220.
by Ded7xSEoPKYNsDd 12y ago
This would also depend on hilariously bad permissions on /srv/www that allow the mysql user to create files there.
221.
by Ded7xSEoPKYNsDd 12y ago
The first time I saw it mentioned, I thought it was just a weird misspelling.