yeahforbes

5 ms·

1.
by yeahforbes 11y ago
Sorry, should've searched for previous thread located at https://news.ycombinator.com/item?id=9682312
2.
US Army Website Defaced by Syrian Electronic Army(arstechnica.com)
2 points by yeahforbes 11y ago|1 comments
3.
by yeahforbes 12y ago
Yeah, the entire script is horrifying. It's been a long time since I've seen malware source, especially targeting *nix.
4.
by yeahforbes 12y ago
In bash, function definitions can be exported via environment variables; in handling that bash also executes whatever immediately follows the function definition; Apache sets environment variables (without sanitizing them for the above) bas
5.
by yeahforbes 12y ago
I'm doing the same, and wondering to myself if that string is actually comprehensive. Are there variants, and if so can they be included as log search patterns without tons of false positives? I've got lots of wget commands in the
6.
by yeahforbes 12y ago
I would guess that for (m)any breaches that have occurred so far, the owner might not have even checked for evidence nor have the thieves bragged yet. Time will tell.
7.
by yeahforbes 12y ago
Excellent so far, although I've always thought of the entire interactive userland as the shell -- not only CLI, but also GUI, as each wraps the kernel on sort of the same plane.
8.
by yeahforbes 12y ago
I'd be interested in a source pointing out the origin of that obligation. I very much agree that end-to-end encryption is superior for transactions that need it. Some don't need it though, and MITM'd encryption does at least
9.
by yeahforbes 12y ago
I have a browser called InBrowser and it gives an alert on your test page. Maybe it wraps AOSP? I don't have "Browser" in my list of apps though, it came with Chrome instead and I installed InBrowser myself. (Android 4.1.2)