Reputation
289
Top tag
Next privilege 300 Rep.
Create new tags
Badges
1 9
Newest
 Scholar
Impact
~4k people reached

  • 0 posts edited
  • 1 helpful flag
  • 28 votes cast
May
22
comment Restrict Apache to only allow access using SSL for some directories
Redirecting HTTP to HTTPS opens you up to certain types of MiTM attacks. Just a caution.
May
22
comment Restrict Apache to only allow access using SSL for some directories
To be fair, 5 years old or not, the reasoning is that the link you point to might disappear, making your answer mostly or completely useless to somebody coming along looking for the information later. So I actually voted your snarky comment up (honest), but I also totally agree that the answer should have some context so that it remains useful. Especially since it's marked as the correct answer.
Apr
30
comment How do I remove (un-apply) a named filter from a Procurve switch port using the CLI?
Of course you might be able to use the web interface, too, depending on your network security settings. The more recent updates to Java aren't super happy with self-signed SSL/TLS certificates on the switches. Etc.
Apr
30
awarded  Scholar
Apr
30
accepted How do I remove (un-apply) a named filter from a Procurve switch port using the CLI?
Apr
30
answered How do I remove (un-apply) a named filter from a Procurve switch port using the CLI?
Dec
19
comment Are redirected GET request to HTTPS secure?
Watch out for the SSLSTRIP attack.
Dec
15
revised Can I plug a 15A UPS into a 30A receptacle?
Just re-read my old post and felt like cleaning up a couple of things.
Dec
14
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
@ThorbjørnRavnAndersen No, you sidestepped the question. The actual request was to document how you would go in surgically and alter or delete a file from the ISO 9660 image. You failed to do that. Of course you can overwrite the ISO image. I said as much from the very start. But that's really no different from popping a physical CD-ROM disc out of a physical drive and tossing it in the dumpster. Honestly, the idea of dedicating an actual, physical CD-ROM drive to one file is a little silly. Thanks for playing. Thumbs down for stomping your feet, though.
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
By the way @ThorbjørnRavnAndersen, you do realize that I upvoted your answer just a minute or after you originally posted it, right? There isn't one magical, universally right answer, to this or essentially any other problem. Peace. ;-)
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
Yeah, that's easier than just popping a physical disc out of the drive and throwing it away. Or replacing it with a version that does something nasty. :-) Seriously, though, this is still the equivalent of removing the physical disc. In no way does this enable surgical deletion of a single file out of the image.
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
To get a CD-ROM (physical or virtual) that you can change, you need something like ISO 13490 (multi-session) or ISO 17341 (rewritable).
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
I meant the OP's comment: 'Well, of course the file is being backed-up regularly, I just wanted another layer of protection against users which are sometimes working on the box with root user permissions', which clearly indicates the issue being addressed is not malicious mischief, but an extra little layer of protection against, essentially, incompetence. Nice ignition, though. ;-)
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
For crying out loud, I UPVOTED your answer. So out of the 2 upvotes you've receive, one of 'em was from me. What part of 'And for the record, I really like the notion of putting the file(s) on a separate NFS server that a root/sudo user on the local host doesn't have root privileges to monkey around with. I'm mostly on your side, here.' sounds like I'm eager to put down your answer?
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
merriam-webster.com/dictionary/immutable
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
ISO 9660 IS IMMUTABLE. If you're going to insist that you can make changes willy-nilly to a mounted ISO 9660 image, please provide documentation/proof of the same.
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
@ThorbjørnRavnAndersen I'll concede that point easily enough. The caveat is that it would require intentionally dismounting the image and overwriting it. A thorough perp would just shred it at that point. But unless you are denying physical access to the machine, it still seems easier to just pop a physical CD out of the drive and toss it in the dumpster than to dismount and overwrite the ISO file, although either is easy. And the OP has stated that the important file is backed up on a regular basis, so this is just an extra measure against accidental damage, not against malicious mischief.
Dec
9
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
@ThorbjørnRavnAndersen How so? ISO 9660 by design is immutable. The party making that change would have to delete and replace the entire ISO file. Not that they couldn't do that. But they couldn't go in and surgically delete one file without tremendous expertise, if even then. It would be much easier to remove a physical CD-ROM from a drive and toss it in a dumpster. ;-)
Dec
8
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
@ChrisH Careful -- I went down that road, basically asking that general type of question and offering an alternative, and the whole thing very strangely and in what I thought was very silly fashion went up in flames. It's cool, whatever. The underlying idea is somewhat interesting despite its flaws, though, and I offered up a variation on the general theme here.
Dec
8
comment Linux - Is there a way to prevent/protect a file from being deleted even by root?
I don't disagree that having everybody running around as root is a big issue, just not the issue the OP is asking about. ;-) And for the record, I really like the notion of putting the file(s) on a separate NFS server that a root/sudo user on the local host doesn't have root privileges to monkey around with. I'm mostly on your side, here.