457 reputation
11023
bio website ninjawars.net
location New York, NY
age 34
visits member for 5 years, 4 months
seen yesterday

I make a ninja game at ninjawars.net, am hirable at bitlucid.com, do crazy art when I can at dnaexmosn.deviantart.com, and code open source stuff on github at github.com/tchalvak

Code in:

  • php
  • javascript
  • html/css

Want to code in: - Clojure

Want to code on: - node.js

aka Tchalvak


Jul
25
comment Proper linux permissions for images that are uploaded to allow deletion and re-uploading
Ok, so apache being able to write everything in these image directories would be set via .htaccess or apache config somewhere, but what kind of directive should I be looking for to prevent interpretation as executable by apache for those folders? I'm also just trying (for my own understanding) to translate the permissions 600 for files and 700 for subdirectories into symbolic permissions. I believe that would be chmod u+rw,go-rwx for files, and chmod u+rwZ,go-rwx for directories (with the Z standing for I am not sure what, X? or s? Not sure of the symbolic rep. of direct. scan.
Nov
9
comment Increase php session time via .htaccess not working
Thank you for this post, I wasn't aware that my apache config values were being completely ignored, only that my sessions were timing out quickly, until I checked my phpinfo() directly. As a result, I've given up on using the apache site setup, which apparently may not use php_value at all (unlike a .htaccess?), and just went with editing the php.ini directly.
Aug
5
comment Enable blowfish-based hash support for crypt
Hmmm, after making those changes, CRYPT_BLOWFISH still doesn't equal 1, for some reason.
Jul
25
comment Our security auditor is an idiot. How do I give him the information he wants?
@Reid Oh no, what a waste of the digitals! All those tubes!
Jul
23
comment Our security auditor is an idiot. How do I give him the information he wants?
I disagree with giving anything to this clearly unsecure individual.
Jul
7
comment Dealing with development subdomains
Whoops, I was wrong, that password-protected the main site as well.
Jul
7
comment Dealing with development subdomains
Looks like I had to specify the url in the virtualhost as per: <VirtualHost dev.shermanbrothers.com:80>`, but it was indeed messing with the virtualhost line that solved it.
Jul
6
comment Dealing with development subdomains
I don't believe so because I have to specifically add each and every domain (annoyingly). Perhaps it's a problem with that default virtualhost being met first, though. Not sure of what slick way to solve it that is.
Jul
6
comment Dealing with development subdomains
Yeah, I just put the site back into my question, easier that way. (It's dev.shermanbrothers.com and shermanbrothers.com).
Jul
6
comment Dealing with development subdomains
Yeah, I should have specified that going to the url shows the same result. Hell, I'll just put the url in the question. I updated the question to explain that the same result is being displayed for dev.shermanbrothers.com and shermanbrothers.com
Jul
6
comment Dealing with development subdomains
No difference if it's in my hosts file pointed at the server's ip address.
Jul
6
comment Dealing with development subdomains
Sorry, should have clarified that it it showing the same content as example.com. I'll add the dev url to my hosts and see what happens.
Jul
6
comment Dealing with development subdomains
Ah, a tool for creating the symlink in the /etc/apache2/sites-enabled/ directory, yeah, I've got a manually created symlink in there that maps to the latter config.
Jul
6
comment Dealing with development subdomains
I have indeed restarted apache. a2ensite I haven't heard of before, so I expect no. I am wondering whether I have to set up a wildcard subdomain with the DNS or whatever. Not sure what is best practice there.
Jun
24
comment How do I protect my company from my IT guy?
-1 for: "I made sure they didn't change anything without us knowing about it."
May
23
comment How do I configure the default email sender properties on a debian server?
Using /etc/email-addresses definitely ended up solving my problem, gracias.
May
20
comment Via logwatch, I get messages that root is opening sessions “-> nobody”. Is this a security concern, or normal operation?
Hmmm, okay, so that may be indicative of the configuration still allowing attempts on the root account's password, good to know.
May
20
comment logwatch explanation
A default install of denyhosts will slow down that type of cracking attempt as well.
May
20
comment Via logwatch, I get messages that root is opening sessions “-> nobody”. Is this a security concern, or normal operation?
Ok, just wanted to make sure. Just a little bit of a follow up question, even in the cases where root login is disabled (my intent and the way that I have configured ssh, as well as denyhost), do those authentication failure messages still occur?
May
11
comment apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
For the -default- virtualhost, not just a specific virtualhost.