482 reputation
11023
bio website ninjawars.net
location New York, NY
age 34
visits member for 5 years, 5 months
seen 23 hours ago

I make a ninja game at ninjawars.net, am hirable at bitlucid.com, do crazy art when I can at dnaexmosn.deviantart.com, and code open source stuff on github at github.com/tchalvak

Code in:

  • php
  • javascript
  • html/css

Want to code in: - Clojure

Want to code on: - node.js

aka Tchalvak


Jun
24
comment How do I protect my company from my IT guy?
-1 for: "I made sure they didn't change anything without us knowing about it."
May
23
comment How do I configure the default email sender properties on a debian server?
Using /etc/email-addresses definitely ended up solving my problem, gracias.
May
20
comment Via logwatch, I get messages that root is opening sessions “-> nobody”. Is this a security concern, or normal operation?
Hmmm, okay, so that may be indicative of the configuration still allowing attempts on the root account's password, good to know.
May
20
comment logwatch explanation
A default install of denyhosts will slow down that type of cracking attempt as well.
May
20
comment Via logwatch, I get messages that root is opening sessions “-> nobody”. Is this a security concern, or normal operation?
Ok, just wanted to make sure. Just a little bit of a follow up question, even in the cases where root login is disabled (my intent and the way that I have configured ssh, as well as denyhost), do those authentication failure messages still occur?
May
11
comment apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
For the -default- virtualhost, not just a specific virtualhost.
May
4
comment non-www domains prevent hosting of static content on the same domain, correct?
I don't really see the cost of another domain as the biggest issue, more like the maintenance & monitoring of another domain. Certainly it's not a major difference, but it's one I'm trying to quantify.
May
4
comment non-www domains prevent hosting of static content on the same domain, correct?
Fair enough, that sounds about right.
May
3
comment non-www domains prevent hosting of static content on the same domain, correct?
That is true. I guess what I meant was: If you use example.com as your canonical url, and you use cookies, then the cookie will be set to use example.com as it's base. Which I will rephrase. Certainly this isn't a problem for sites that don't use cookies at all, and won't ever use cookies in the future.
Apr
11
comment How can I set up mysql logs so that syntax errors are logged?
Right, I should have been more clear that I already checked that log out, I was hoping that there was a way to view queries with improper syntax and ignore queries that have the proper syntax. Because viewing everything in the log is so spammy that it's useless.
Mar
28
comment Common mistakes made by System Administrators and how can we avoid them?
This post just reminded me to do a manual backup!
Mar
28
comment Common mistakes made by System Administrators and how can we avoid them?
Hmmmm, made me rethink where I keep my setup documentation.
Mar
25
comment Blocking apache access via user agent string
Yeah, that would block bad user agent strings, but I'm looking to take it a step further and auto-ban ips associated with the bad user agent strings, such that use of the user-agent string gets you banned from that point onwards on that ip. I'd use fail2ban but I haven't found a way to nicely apply that to http requests at this point.
Mar
23
comment How do I configure the default email sender properties on a debian server?
Thanks, I'll check into that.
Mar
15
comment last night, my server was doing something intensive with the hard drive
Yeah, I see updatedb causin' issues on my ubuntu machine frequently.
Mar
15
comment What response should be made to a continued web-app crack attempt?
Uh, why would a different host be desirable?
Mar
3
comment Open source server monitoring
Pretty complicated, based on it's manual: mmonit.com/monit/documentation/monit.html#general_operation
Mar
3
comment Open source server monitoring
Munin seems to be pretty slow, actually: Live monitoring link: munin.ping.uio.no/ping.uio.no/comparison-day.html
Mar
3
comment Open source server monitoring
munin-monitoring.org
Mar
3
comment Php: How to enable blowfish hashing on a debian server
Turns out, as you mentioned, that the suhosin php-hardening patch adds native support for blowfish crypt. Since that sidesteps the need to upgrade to php5.3 (which is not yet supported by zend optimizer) I plan to persue that first.