502 reputation
11024
bio website ninjawars.net
location New York, NY
age 34
visits member for 5 years, 7 months
seen 1 hour ago

I make a ninja game at ninjawars.net, am hirable at bitlucid.com, do crazy art when I can at dnaexmosn.deviantart.com, and code open source stuff on github at github.com/tchalvak

Code in:

  • php
  • javascript
  • html/css

Want to code in: - Clojure

Want to code on: - node.js

aka Tchalvak


Feb
20
comment Increased number of 408 Request Timeouts for null on a webserver
Fair enough, the browser predictive optimization one seems like it may well fit the situation, especially since the error logs match. So I'll have to verify that myself later. Thanks.
Feb
18
comment Increased number of 408 Request Timeouts for null on a webserver
I posted a longer sampling of the most recent 408 requests into the pastebin link. The hits are relatively infrequent, throughout the day.
Feb
13
comment Increased number of 408 Request Timeouts for null on a webserver
Potentially related question: serverfault.com/questions/247051/…
Feb
13
comment Increased number of 408 Request Timeouts for null on a webserver
I've lowered it to 150 seconds, though I guess that will only increase the number of timeouts, of course, but I guess at least the requests that timeout wont hold onto resources.
Feb
13
comment Increased number of 408 Request Timeouts for null on a webserver
Looks like it is the rediculously high number of 300 seconds: # # Timeout: The number of seconds before receives and sends time out. # Timeout 300
Feb
13
comment Increased number of 408 Request Timeouts for null on a webserver
The "408 request timeout null: 694 times" and "a total of 125 sites probed the server" messages are from the logwatch log summarizing app, which emails me out info about the server logs on a daily basis. The others are entries from a grep of /var/log/apache2/access.log I also clarified in my question now.
Jan
28
comment Equivalent to denyhosts, but for HTTP requests?
...wouldn't that tie up your server's resources just as much as an attackers...
Nov
13
comment How can I get access to password hashing in postgresql? Tried installing postgresql-contrib in ubuntu, still can't access hashing functions
Yeah, they seem to have updated the system to make extensions easier to manage, happily, and now after installing postgresql-contrib in postgres 9.1 and up you can just: create extension pgcrypto or from the command line echo "create extension pgcrypto" | psql -d dataBaseName to enable extensions, as well.
Sep
11
comment Free service for checking for DNS errors on your domain?
Hmmm, Zonecheck stops on first error, which isn't helpful (at least, in the web interface).
Sep
10
comment Denyhosts: Should I ever clear the denied IP hosts file?
Any suggestions for what should I look into to set up deny.hosts rotation?
Sep
10
comment Denyhosts: Should I ever clear the denied IP hosts file?
Hmmm, right, I guess the ideal would be to turn on a rotation so that it cleans itself periodically. I'm not using centralized reporting or email notification within denyhosts per se, though I do receive logs of ips that get denied via logwatch emails.
Jul
26
comment Proper linux permissions for images that are uploaded to allow deletion and re-uploading
Ok, it seems to even view, you need X, so evidently that is the symbolic permission to add. What should I look into for apache to prevent execution within a directory?
Jul
25
comment Proper linux permissions for images that are uploaded to allow deletion and re-uploading
Ok, so apache being able to write everything in these image directories would be set via .htaccess or apache config somewhere, but what kind of directive should I be looking for to prevent interpretation as executable by apache for those folders? I'm also just trying (for my own understanding) to translate the permissions 600 for files and 700 for subdirectories into symbolic permissions. I believe that would be chmod u+rw,go-rwx for files, and chmod u+rwZ,go-rwx for directories (with the Z standing for I am not sure what, X? or s? Not sure of the symbolic rep. of direct. scan.
Nov
9
comment Increase php session time via .htaccess not working
Thank you for this post, I wasn't aware that my apache config values were being completely ignored, only that my sessions were timing out quickly, until I checked my phpinfo() directly. As a result, I've given up on using the apache site setup, which apparently may not use php_value at all (unlike a .htaccess?), and just went with editing the php.ini directly.
Aug
5
comment Enable blowfish-based hash support for crypt
Hmmm, after making those changes, CRYPT_BLOWFISH still doesn't equal 1, for some reason.
Jul
25
comment Our security auditor is an idiot. How do I give him the information he wants?
@Reid Oh no, what a waste of the digitals! All those tubes!
Jul
23
comment Our security auditor is an idiot. How do I give him the information he wants?
I disagree with giving anything to this clearly unsecure individual.
Jul
7
comment Dealing with development subdomains
Whoops, I was wrong, that password-protected the main site as well.
Jul
7
comment Dealing with development subdomains
Looks like I had to specify the url in the virtualhost as per: <VirtualHost dev.shermanbrothers.com:80>`, but it was indeed messing with the virtualhost line that solved it.
Jul
6
comment Dealing with development subdomains
I don't believe so because I have to specifically add each and every domain (annoyingly). Perhaps it's a problem with that default virtualhost being met first, though. Not sure of what slick way to solve it that is.