gighi

9 ms·

31.
Time Is Finite: The Life of a Typical American in Weeks(ritholtz.com)
3 points by gighi 12y ago|0 comments
32.
by gighi 12y ago
Yeah, the condition you mention is the key: what are the odds that the US economy (or the overall world average, if you're diversified with a global index) will continue to grow as gloriously as it has done in the past 50 years? (when
33.
by gighi 12y ago
What would make this more interesting for me would be a pretty accurate answer to the question: "what are the chances that this could happen again if the guy started in 2014"? :)
34.
by gighi 12y ago
Except that in this case, the guy bought the whole market by indexing, so he wasn't very wary and picky, although the index itself took care of getting rid of bad performers (because they went out of business).
35.
What If You Only Invested at Market Peaks?(awealthofcommonsense.com)
21 points by gighi 12y ago|20 comments
36.
AWS SDK for Python (Boto) Now Supports Python 3(aws.amazon.com)
3 points by gighi 12y ago|0 comments
37.
by gighi 12y ago
Yes, I mounted the bucket using https://github.com/s3fs-fuse/s3fs-fuse
38.
by gighi 12y ago
To answer your questions: 1) Yes, it would have been better but I honestly think this attack was completely botnet-driven and the attacker didn't really mean to cover his footprints too much: in the timespan of 10 minutes, he sent over
39.
by gighi 12y ago
I anonymized the IP addresses in a consistent way before publishing the blog post, so in the very worst case the DoS attack will go towards a completely new host :)
40.
by gighi 12y ago
On some providers yes, in fact I explicitly enabled root SSH login for those. Other providers (such as Digital Ocean) use the root account by default even for Ubuntu, although the password is set to a really secure and random one.
41.
by gighi 12y ago
That's an interesting project. Would it have recorded also statistics like the connection activity? Seeing all the UDP traffic, and being able to trace its origin to the "@udp1 39.115.244.150 800 300" command, received not v
42.
by gighi 12y ago
Yes, I didn't put it in the article because it was getting too long otherwise, but the attacker immediately tried brute-forcing the root account, and after a handful of common passwords ("qwerty", "qwerty123", &quot
43.
by gighi 12y ago
Absolutely not, as I said in the article, I went out of the "wise" way and manually enabled: 1) Password authentication 2) Root authentication 3) Changed root password to "password" All the providers offer fairly safe de
44.
Fishing for Hackers: Analysis of a Linux Server Attack(draios.com)
237 points by gighi 12y ago|50 comments
45.
by gighi 13y ago
We use CPack for the moment, so you can just run "make package" inside the CMake build directory and it will generate RPM/DEB.
46.
by gighi 13y ago
That's the wrong way to use it. "sysdig -w" switch will generate a binary dump (in a pcap format) containing the "raw events" coming from the kernel (plus a snapshot of information gathered from /proc), so it&#
47.
Sysdig creator blogs about motivations for project(draios.com)
5 points by gighi 13y ago|0 comments