LinuxBender

782 ms·

1. 18121.▲
   by LinuxBender 11y ago

   Easiest way to see it on OSX is to install Little Snitch and disable all the default rules.
2. 18122.▲
   by LinuxBender 11y ago

   There is a step where the auditor will observe you entering a correct and an incorrect password to enter the systems. If your org is depending on SSH key passphrases for this step and you get the wrong person in front of the auditor (the o
3. 18123.▲
   by LinuxBender 11y ago

   Some time soon I will put something up on github so you can test this methodology. It probably won't be tonight though.
4. 18124.▲
   by LinuxBender 11y ago

   I agree with that. Folks are forced to create little isolated environments that are less likely to be patched or monitored, for fear of bringing more systems into PCI scope. That is slowly starting to change however. PCI DSS 3.0 gets a bi
5. 18125.▲
   by LinuxBender 11y ago

   They are correct. You can't enforce passphrases (at all) on ssh keys, nor can you enforce key rotation unless you have a system that issues both the public and private keys. Even then, the user can simply re-sign the key and remove t
6. 18126.▲
   by LinuxBender 11y ago

   OpenSSH allowing this behavior by default is in itself the vulnerability.
7. 18127.▲
   by LinuxBender 11y ago

   Keylogger, perhaps. The multiplexing just makes it trivial to connect to everything with no logging and no authentication. I don't even have to modify the PATH or install a keylogger. I am already several steps beyond that in one mo
8. 18128.▲
   by LinuxBender 11y ago

   The reason that this involves SSH and is in no way related to the malware example you provided is, this is not malware and will never be detected as such. Very few things can actually block this and most of those things are either too expe
9. 18129.▲
   by LinuxBender 11y ago

   You would think that is common sense, right? :-) I so wish more people thought like you. Get permission from your privacy and legal team before you do this of course. Write a small script in whatever language you like. Encode a ... gosh
10. 18130.▲
    by LinuxBender 11y ago

    This was also being discussed here [1] [1] https://news.ycombinator.com/item?id=11049993 Apparently it will be obvious to folks that this has occurred.
11. 18131.▲
    by LinuxBender 11y ago

    The article didn't make mention multiplexing and MaxSessions defaults in OpenSSH. The default is 10 which means you auth once, and all subsequent logins are without auth and without syslog entries. If you manage secure systems and ha
12. 18132.▲
    BlackBerry axes 200 jobs – including a third of its HQ staff(theregister.co.uk)

    2 points by LinuxBender 11y ago|0 comments
13. 18133.▲
    by LinuxBender 11y ago

    Isn't this a similar argument made during WWII by the German scientists that were performing medical experiments on prisoners of war to benefit the greater good? Ethics aside, were they scientifically correct?
14. 18134.▲
    by LinuxBender 11y ago

    Good point. Would code review tools catch this? Gerrit, Crucible, et al? More specifically, how obvious would it be and would people question what they see?
15. 18135.▲
    by LinuxBender 11y ago

    This is a good example of why git repos should be snapshot and archived to read-only media periodically. I like this! Thank you
16. 18136.▲
    Who Wants a Quad-Core 4.2GHz, 64GB, 5TB SSD RAID 10 … Laptop?(theregister.co.uk)

    3 points by LinuxBender 11y ago|1 comments
17. 18137.▲
    OpenSSL fixes bug, gets dissed by German gov(theregister.co.uk)

    1 points by LinuxBender 11y ago|0 comments
18. 18138.▲
    by LinuxBender 11y ago

    One must assume encrypted content will not be safe in the future. I would also be leery of anything that says "perfect". e.g. Perfect Forward Secrecy. In the future, we may be making fun of that.
19. 18139.▲
    by LinuxBender 11y ago

    Excellent. I was not aware of that, thank you!
20. 18140.▲
    UC Berkeley profs blast secret IT monitoring kit on campus(theregister.co.uk)

    4 points by LinuxBender 11y ago|0 comments
21. 18141.▲
    by LinuxBender 11y ago

    I agree with your summation. To add to this, there are many things going on under the hood that none of us asked for that are taking up system resources, dialing home and draining battery life. Some time, try this yourself: sudo open
22. 18142.▲
    by LinuxBender 11y ago

    Did you also try stripping out the locale's from glibc that you don't need? In CentOS that frees up about 150MB for me.
23. 18143.▲
    by LinuxBender 11y ago

    Has anyone actually used more than 512 PIDs in their docker container? I am curious if the new limit will impact anyone.
24. 18144.▲
    Docker revs up Engine, hits 1.1(theregister.co.uk)

    3 points by LinuxBender 11y ago|1 comments
25. 18145.▲
    Fewer humans are seeing web ads(theregister.co.uk)

    1 points by LinuxBender 11y ago|0 comments
26. 18146.▲
    by LinuxBender 11y ago

    Same. I deleted my facebook account shortly after being talked into creating it. I learned way too much about my friends and lost respect for many of them. I've never had a twitter account. I have a dumb throw away phone registered
27. 18147.▲
    by LinuxBender 11y ago

    Does this prevent someone from blowing the whistle anonymously? Isn't there some risk in forcing people to be anonymous? e.g. I know I can't go to the government for help, so I have to post something on WikiLeaks instead?
28. 18148.▲
    by LinuxBender 11y ago

    In addition to SSL Labs, I also find this useful for things that are not exposed to the internet. (firewalled) [1] https://github.com/drwetter/testssl.sh It only depends on OpenSSL and bash. I find it very useful for
29. 18149.▲
    by LinuxBender 11y ago

    Compiling nginx would be a lot easier if they would stop hard coding so many things in the makefile. Enabling libc hardening (aslr, pie, full relro for example) requires manually editing generated files before compiling and overriding his
30. 18150.▲
    by LinuxBender 11y ago

    I agree with your sentiments. In our company, communication is already highly splintered. We have so many ways of communicating, posting, sharing and chatting that nobody knows what is going on. It is also very distracting and time consum