Reputation
683
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
4 19
Impact
~17k people reached

Apr
26
awarded  Nice Question
Mar
11
comment How do you continuously run Wireshark without eating up all of my RAM?
My deepest sympathies. ;-)
Mar
11
answered How do you continuously run Wireshark without eating up all of my RAM?
Mar
7
awarded  Critic
Mar
7
comment Find MAC addresses in /proc or somewhere despite bonding device?
-1 because this answer is simply incorrect; the accepted answer of looking in /proc/net/bonding/$BOND_IFACE seems to be the only way to do it.
Nov
1
awarded  Popular Question
Sep
15
comment Why does it take tens of seconds to get a shell prompt?
+1. 99% of the time for me it's the reverse DNS lookup.
Jun
2
revised How can I start a shell inside a jail on FreeBSD?
minor spelling/grammar corrections
Jun
2
suggested approved edit on How can I start a shell inside a jail on FreeBSD?
Jan
20
awarded  Yearling
Jan
20
revised How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
remove rhetoric so we can focus on the facts
Jan
20
comment How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
This answer assumes (1) you are using Windows, and (2) you aren't using any software that might try to use AMT-overlapping ports for other reasons. (you may have, for example, a VoIP application that uses random UDP ports) It also makes a claim about how Intel "strips off" the AMT commands, which was clearly shown to be false in my answer. Can you provide a reference to support your claim? I wouldn't be surprised if Intel considered this a bug and fixed it one day, but at the time I posted my answer, they clearly had not.
Jan
20
suggested approved edit on How does Intel AMT (Active Management Technology) not interfere with the TCP/IP host stack?
Nov
17
awarded  Caucus
Oct
24
comment Is it possible to get OpenSSH to log the public key that was used in authentication?
This thread looks relevant. It finds the matching key twice: once to determine if the key would be acceptable or not, then a second time to check the signature the client provides.
Oct
24
comment Linux ssh: allow public-key authentication without giving user read rights to private key
If you need to lock it down in this way, I assume you've taken measures to disallow users from adding new public keys to the ~/.ssh/authorized_keys file?
Oct
24
comment Linux ssh: allow public-key authentication without giving user read rights to private key
+1; I think this option provides good flexibility, in case the user needs to use SSH features other than the terminal, such as port forwarding, secure copy, etc. Even an alternate SSH client should work. The sudo option could be better for a locked-down environment, though...
Sep
30
awarded  Explainer
Sep
2
comment How can I run arbitrarily complex command using sudo over ssh?
Can we assume you've set up sudo so that it does not require a pasword prompt?
Jul
16
comment ip route get recognizes address as anycast
@pawel7318 If you don't want it any more, you should be able to remove it with ip route del anycast 1.2.3.4 dev eth0. I was just experimenting with this on Ubuntu 14.04, and it looks like there are some bugs here. For example, I don't see the anycast route when I just type ip -4 route...