457 reputation
11023
bio website ninjawars.net
location New York, NY
age 34
visits member for 5 years, 4 months
seen Dec 18 at 2:22

I make a ninja game at ninjawars.net, am hirable at bitlucid.com, do crazy art when I can at dnaexmosn.deviantart.com, and code open source stuff on github at github.com/tchalvak

Code in:

  • php
  • javascript
  • html/css

Want to code in: - Clojure

Want to code on: - node.js

aka Tchalvak


Dec
17
awarded  Notable Question
Nov
14
comment nginx / fpm and PHP_VALUE not working
Based on that bug, it may be an escaping issue for some reason.
Oct
16
comment How to set a favicon.ico for a specific Virtual Host on Nginx?
The permissions issue fixed it for me as well!
Oct
1
awarded  Taxonomist
Sep
19
comment Tried to deny access to apache /server-status module with certain exceptions, but it became exposed everywhere
Hmmm, seemed promising that allow locations might be space delimited instead of comma+space delimited, but in actuality it didn't make a difference.
Sep
18
asked Tried to deny access to apache /server-status module with certain exceptions, but it became exposed everywhere
Aug
22
awarded  Notable Question
Aug
20
revised Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
deleted 1 character in body
Aug
20
revised Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
added 391 characters in body
Aug
20
comment Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
There are two advantages that I can see to not providing the basic auth password & username on every admin url: 1: brute forcing of the basic auth cannot be done until the wp-adminsecretlogin/ url is accessed, and since that url will be a custom one for the site/blog network, that would require prior knowledge of the login url and would generally require tailoring the attack to the unique site/blog network. 2: Returning 404 will mask the standards signals to bots that a wordpress admin section is present, to discourage the frequent brute force scripting attempts that tend to occur.
Aug
20
asked Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
Jul
23
awarded  Nice Question
Jul
2
awarded  Curious
Jun
11
awarded  Famous Question
May
13
awarded  Popular Question
Apr
30
awarded  Popular Question
Nov
5
awarded  Yearling
Oct
14
awarded  Notable Question
Sep
16
awarded  Popular Question
Aug
20
awarded  Notable Question