Hello71

107 ms·

901.
by Hello71 13y ago
"srcip"
902.
by Hello71 13y ago
Port knocking: sending a stream of special packets to verify that the user is trusted. Sounds familiar.
903.
by Hello71 13y ago
I am wrong. No.
904.
by Hello71 13y ago
-A PORTS -p tcp -m tcp --dport 22 -m hashlimit --hashlimit-upto 1/min --hashlimit-burst 2 --hashlimit-mode srcip --hashlimit-name ip4-ssh-brute -j ACCEPT
905.
by Hello71 13y ago
ACCEPT tcp -- anywhere anywhere tcp dpt:ssh limit: up to 1/min burst 2 mode srcip Have fun brute forcing at 1 connection per minute. (Oh, and PasswordAuthentication is off too.)
906.
by Hello71 13y ago
With "password" authentication method, the password is not transmitted to the remote server. (AFAIK) However, all modern sshds (AFAIK, at least OpenSSH) default to (publickey, keyboard-interactive). As the name says, keyboard-inte
907.
by Hello71 13y ago
How do you expect to get the nonce across the network without the NSA getting it?
908.
by Hello71 13y ago
So... we've come full circle. Extensions can still say "nope, you need to give me ALL permissions".
909.
by Hello71 13y ago
curl and wget, right?
910.
by Hello71 13y ago
Turn off SSL 3.0 and TLS 1.0. Problem solved for all known attacks. Unfortunately, that includes your users.
911.
by Hello71 13y ago
How do you think hashing functions work?
912.
by Hello71 13y ago
and yet, 300K droplets later, there is still no: • ipv6: suggested on Mar 1, 2012, PLANNED on Nov 4, 2012, no apparent progress since. https://digitalocean.uservoice.com/forums/136585-digital-oce... • ISO upload: sugge
913.
by Hello71 13y ago
There's target=frame (never used in practice), but that's only one level down.
914.
by Hello71 13y ago
https://webcache.googleusercontent.com/search?q=cache:www.li...
915.
by Hello71 13y ago
It works unless you have active kernel exploit protection on, which kills all processes by any user causing "suspicious kernel crash" until reboot.
916.
by Hello71 13y ago
pasuspender cat
917.
by Hello71 13y ago
Yes. It's called libpng.
918.
by Hello71 13y ago
(x).toString(2)
919.
by Hello71 13y ago
pasuspender
920.
by Hello71 13y ago
https://en.wikipedia.org/wiki/Wikipedia:Advertisements#Argum... Insignificant revenue. The click-through rate might very well be so low that only a small amount of revenue would be brought in by the ads. It would not be worth barraging th
921.
by Hello71 13y ago
So the software would be better if it was 1.0?
922.
by Hello71 14y ago
If you wait for one confirmation, it's possible that the attacker may find (or have found) a block by chance before anyone else does.
923.
by Hello71 14y ago
Firefox saves all assets to a _files directory then fixes the URLs to point in there. If you really, really want to use //: busybox httpd -p 8080
924.
by Hello71 14y ago
sigh PayPal is (still) not evil. It charges too much, and does some shitty things, like all companies. It's ridiculous to jump to conclusions based off a blog post that doesn't even post a copy (redacted if necessary) of the allegedly off
925.
by Hello71 14y ago
UPnP does not decrease security in a home/SMB environment. There is a good reason why reverse shells exist.
926.
by Hello71 14y ago
No, it will stop when the directory disappears.
927.
by Hello71 14y ago
while inotifywait -qe close_write $(SRC); do $(MAKE); done
928.
by Hello71 14y ago
Regardless: AUTHORIZED_KEYS FILE FORMAT .... command="command" Specifies that the command is executed whenever this key is used for authentication. The command supplied by the user (if any) is
929.
by Hello71 14y ago
Question: What happens when you type `ssh git@github.com /bin/bash`? That command doesn't use the shell set in /etc/passwd at all, and you authenticate successfully, so it must give you a shell, right? No.
930.
by Hello71 14y ago
If GitLab security were to be perfect, then this change would not affect security in any which way. However, if the .ssh/authorized_keys file were to be written erroneously, it is possible that this change may increase the likelihood of rec

More ›