935 reputation
617
bio website matt.scharley.me
location Australia
age 27
visits member for 5 years, 3 months
seen Sep 5 at 6:44

Email: matt@scharley.me
Website: matt.scharley.me
Twitter: @mattscharley
CV: Stackoverflow Careers


Sep
30
awarded  Explainer
Jun
16
awarded  Popular Question
Apr
7
awarded  Enlightened
Apr
7
awarded  Nice Answer
Feb
5
awarded  Popular Question
Nov
18
awarded  Popular Question
Sep
25
awarded  Popular Question
Jun
30
awarded  Yearling
Sep
10
revised How can I create an “su” only user (no SSH or SFTP) and limit who can “su” into that account in RHEL5?
Oops
Aug
14
revised How can I create an “su” only user (no SSH or SFTP) and limit who can “su” into that account in RHEL5?
added 236 characters in body
Aug
14
comment How can I create an “su” only user (no SSH or SFTP) and limit who can “su” into that account in RHEL5?
Out of curiosity, why limit them to a shell? Seems an odd command to pick to limit to since once they have a shell they can run anything anyway.
Aug
14
answered How can I create an “su” only user (no SSH or SFTP) and limit who can “su” into that account in RHEL5?
Jun
30
awarded  Yearling
Mar
21
comment iptables: difference between NEW, ESTABLISHED and RELATED packets
@Kris: It's pretty hard to fake outgoing packets, so by the wording of the man page in the answer, I don't see how. You are correct that it's possible to fake a packet which looks like it's bound for an open connection, but even without a firewall, the TCP stack would just drop the packet on the floor if it didn't already know about an open connection from the sender. If this is on a firewall on a router, it's still possible to maintain this state by inspecting SYN/ACK/RST/etc packets as they pass through the router, and I'd expect iptables to do this.
Mar
19
comment iptables: difference between NEW, ESTABLISHED and RELATED packets
Out of curiousity, do you know how it determines RELATED packets? Is there some mechanism that applications can use to signal to iptables that a connection will be a related connection, or is it purely part of the stateful part of iptables?
Mar
15
comment How ISPs will assign IPs /subnets for end users in IPv6
Can confirm that my residential provider here in AU (Internode) is also handing out /64's already to people who want them. Re: single addresses though, how many ISP's will hand out individual addresses? From all the conversations I've seen, NAT was only really to help sort out the shortage in the IPv4 address space.
Mar
10
awarded  Citizen Patrol
Mar
8
comment How to add a user without knowing the encrypted form of the password?
@Jim: If not all, then 99%. It's part of the SSH client and server packages, so it's almost always installed, though technically I don't believe it's required. You can count on it being installed by default, but not necessarily that someone has not uninstalled it.
Mar
7
comment What happens if two machines respond to an ARP “who is” request?
@cabbagebot: ARP poisoning is a valid and common enough attack vector given it's limitations. You have to be on the same local link as your intended target, so out of all attacks it tends to be a lesser concern. However, if you're running a public network of some kind then definitely be wary of this one.
Mar
6
comment Snapshots == EBS backed instance, persistence, and S3 storage?
@BartSilverstrim: Unfortunately, the issue isn't the terminology, it's the shortening of it. AMI stands for Amazon Machine Image, which is quite clear, but just 'Image' is ambiguous if you're not sure what it's actually referencing :(