jewel

32 ms·

271.
by jewel 12y ago
As an alternative, make sure that /bin/sh is set to something other than bash. In Debian and Ubuntu it is already set to dash by default. (There's no guarantee that dash doesn't have similar problems, but at least the s
272.
by jewel 12y ago
> There is still no working patch. Is this still true? On Ubuntu we got another update today: * SECURITY UPDATE: incomplete fix for CVE-2014-6271 - debian/patches/CVE-2014-7169.diff: fix logic in parse.y.
273.
by jewel 12y ago
For completeness sake, here is an example of how to make it parallel in ruby: require 'net/http' require 'uri' urls = ["http://www.cnn.com","http://espn.go.com&#
274.
by jewel 12y ago
On a hardened system you remove all unnecessary binaries completely. See, for example, PCI DSS section 2.2.5. https://www.pcisecuritystandards.org/documents/PCI_DSS_v3.pd...
275.
by jewel 12y ago
Of course, but what's the exploit vector in that case?
276.
by jewel 12y ago
On Ubuntu, /bin/sh is a symlink to dash. /bin/sh is what system() will invoke.
277.
by jewel 12y ago
In order to make a map of which wireless LANs are available, you switch the radio in receive mode and then cycle through the channels, capturing all packets. Then, you filter the packets for beacons. I believe when you "scan" fo
278.
by jewel 12y ago
What tools are people using to track and push out security updates, if any? Right now I only have a few servers to administer so apticron is sufficient for notification and upgrading isn't a burden. Also, does anyone have a way to pus
279.
by jewel 12y ago
There are several TLS modes that don't use certificates. SRP and PSK are the two that I have some limited experience with. Both require sharing a password or key beforehand through some other medium. If you're not concerned with
280.
by jewel 12y ago
My favorite method of short-term energy storage at scale is to use excess energy during non-peak times to pump water uphill, back into a reservoir. The topology has to be right for it (and obviously it requires there to be plenty of excess
281.
by jewel 12y ago
smartmontools work good on the command line in linux. There's also a GUI called palimpsest which makes the SMART numbers easy to read. On other operating systems any tool that can read the SMART data is what you should look for.
282.
by jewel 12y ago
> This is also following the concept that storage gets cheaper as time goes on. More movies = more storage fees, but I don't think this overhead is nearly as large as some would assume. For a million 2-hour movies, stored at 10 mbps
283.
by jewel 12y ago
Yes, but if the logs are just for debugging an application, it usually doesn't matter. Application logs are useful for figuring out why an application crashed, but shouldn't be relevant for figuring out why a system went down. H
284.
by jewel 12y ago
It seems like with the hangouts/google voice merger on android that it does now support it, but I haven't tested myself personally to see.
285.
by jewel 12y ago
On debian-based systems, /etc/cron.d/mdadm will already do this on the first Sunday of the month.
286.
by jewel 12y ago
I work on slideshow creation software for funeral homes. Stories like yours are something I worry quite a bit about, since we've found that once users trust our software, they stop bothering with the preview. We let the user choose cu
287.
by jewel 12y ago
Five years ago my wife and I shared an Ubuntu desktop. It was awesome, and we were even able to play 3D games together. If I remember correctly, I had to bump the computer up to 6GB of RAM. She was running off the motherboard's built
288.
by jewel 12y ago
Perhaps it'd be better to change the link to a second-hand source in these cases, instead of the usual approach of the mods switching the link out to be the original source. I'll take blogspam over a paywall, and the WSJ link wil
289.
by jewel 12y ago
A good portion of the bandwidth being used on the Internet could be done over multicast if it were widely supported. For example, popular content on Hulu could be multicast. You'd download the beginning of the video over HTTP but simu
290.
by jewel 12y ago
At my last job we had several shared IMAP mailboxes. The workflow that we used that worked fairly well was to have a sub-folder for each user. When a new mail came in, you'd first move it into your folder, then handle the email. This
291.
by jewel 12y ago
Right. A good solution would be a bloom filter that ships in the extension of relevant terms.
292.
by jewel 12y ago
Similar vulnerabilities to heartbleed could exist in TCP stacks and mail servers, revealing the contents of unencrypted mail. The reason encrypting things is nice is that it reduces the attack surface. You only have to protect your email a
293.
by jewel 12y ago
It's meant to be a phrase that will draw more information about the job; it's not a compliment. Instead you could say something like "I don't know much about that line of work, what sort of challenges do you face?",
294.
by jewel 12y ago
S3's number is just marketing. It's going to be that durable until a black swan event wipes out 0.1% of all files. I imagine they keep multiple copies of every file, spread across multiple data centers. It's durable agains
295.
by jewel 12y ago
For certain workloads these storage pods are much, much cheaper than S3. Anything where you are storing files that rapidly become stale, but still need to be instantly accessible for the rare random request. I've only looked at it fro
296.
by jewel 12y ago
Both firefox and chromium have an option to disable third-party cookies. I believe this stops this sort of tracking, making each webpage a silo. I additionally isolate websites where I need to log in into their own profile using a shell sc
297.
by jewel 12y ago
In my opinion passengers are far better than phone calls because the passenger has contextual awareness of what's happening while you're driving. He or she will pause a sentence while you're trying to merge onto the freeway,
298.
Houston man charged with child porn possession after Google cyber-tip(khou.com)
10 points by jewel 12y ago|5 comments
299.
by jewel 12y ago
Oh, I hadn't thought of that. That makes perfect sense.
300.
by jewel 12y ago
I don't think so. Here is my experience so far. For background, I don't run a spam filter at all and host my own mail on a enterprise fiber line that's unlikely to have ISP-level filtering. (If they do have it, it's t

More ›