502 reputation
11024
bio website ninjawars.net
location New York, NY
age 34
visits member for 5 years, 7 months
seen Mar 21 at 19:13

I make a ninja game at ninjawars.net, am hirable at bitlucid.com, do crazy art when I can at dnaexmosn.deviantart.com, and code open source stuff on github at github.com/tchalvak

Code in:

  • php
  • javascript
  • html/css

Want to code in: - Clojure

Want to code on: - node.js

aka Tchalvak


Jan
30
comment I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Is setting the dbserver1 postgresql.conf to listen only to the ips of appserver1 (and any future additional app servers) not enough?
Jan
30
comment I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Yes, exactly so, it's an "internal network" for rackspace servers, which means god knows who could be on there! Damn, I have to set up a VPN just to securely connect to my database on a separate server? sighs I've never messed with a VPN before.
Jan
30
revised I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
added 177 characters in body
Jan
30
comment I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Ah, right, I'm using rackspace, and I'm connecting via a rackspace internal network IP, but since rackspace is, like, a cloud-server provider with some million users or servers or whatever, I'm not sure that it's best practice to trust even such an internal connection.
Jan
30
revised I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
edited title
Jan
30
asked I set up a web application server, and a separate server for postgres on the same network. How should I secure the connection?
Dec
17
awarded  Notable Question
Nov
14
comment nginx / fpm and PHP_VALUE not working
Based on that bug, it may be an escaping issue for some reason.
Oct
16
comment How to set a favicon.ico for a specific Virtual Host on Nginx?
The permissions issue fixed it for me as well!
Oct
1
awarded  Taxonomist
Sep
19
comment Tried to deny access to apache /server-status module with certain exceptions, but it became exposed everywhere
Hmmm, seemed promising that allow locations might be space delimited instead of comma+space delimited, but in actuality it didn't make a difference.
Sep
18
asked Tried to deny access to apache /server-status module with certain exceptions, but it became exposed everywhere
Aug
22
awarded  Notable Question
Aug
20
revised Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
deleted 1 character in body
Aug
20
revised Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
added 391 characters in body
Aug
20
comment Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
There are two advantages that I can see to not providing the basic auth password & username on every admin url: 1: brute forcing of the basic auth cannot be done until the wp-adminsecretlogin/ url is accessed, and since that url will be a custom one for the site/blog network, that would require prior knowledge of the login url and would generally require tailoring the attack to the unique site/blog network. 2: Returning 404 will mask the standards signals to bots that a wordpress admin section is present, to discourage the frequent brute force scripting attempts that tend to occur.
Aug
20
asked Apache: Stealth 404 the admin area until authenticated via basic auth, then allow access
Jul
23
awarded  Nice Question
Jul
2
awarded  Curious
Jun
11
awarded  Famous Question