Reputation
5,555
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
15 35
Newest
 Enlightened
Impact
~343k people reached

Oct
14
awarded  Enlightened
Oct
14
awarded  Nice Answer
Sep
1
awarded  Caucus
Aug
7
awarded  linux
Aug
5
comment How to disallow reset/reboot/shutdown on linux when ssh users are connected?
@DennisNolte: You are right, I forgot about molly-guard. Any experience installing it outside of Debian/Ubuntu? Appear to be Debian which is the actual upstream for molly-guard.
Aug
5
answered How to disallow reset/reboot/shutdown on linux when ssh users are connected?
Jul
29
comment Install a newer version of Git on CentOS 7
@Sven Based on the need for a newer git version I'd rather say that he is referring to the Git 2.3 "Push to deploy", which allows you to push to a non-bare repository, and also have its working directory updated - github.com/blog/1957-git-2-3-has-been-released
Jul
24
revised yum list available showing packages, but yum update not installing those packages…These rpms are not present
Fixing formating
Jul
22
comment SSHFS mount with sudo - how to restrict privileges?
Well, obviously you shouldn't try things out on an actual production server :-) Much better to do in on a local virtual machine, or something.
Jul
22
comment SSHFS mount with sudo - how to restrict privileges?
a) Regarding whatever those instructions works, why haven't you simply tried them? But yeah, from a quick look they appear to make sense. b) What do you expect to gain security wise by allowing full root access (by way of sudo), but limited to sftp? That sftp access is in itself enough to remove any further limitation on the account.
Jul
11
comment SPF - Adding lots of IPs
Any chance that you ended up creating a broken record? I just created a txt record for the domain shv25.se, containing 16 ipv4 adresses and 4 ipv6 adresses, without mail-tester.com having any problem with it.
Jul
11
answered SPF - Adding lots of IPs
Jul
4
answered How many SSH private key to setup for multiple servers?
Jun
28
comment Is it really secure to connect to a server by SSH from hotels during a journey?
@kasperd: Well, I can easily imagine someone just discovering agent forwarding, but not fully understanding it, putting something like "Host *\n\tForwardAgent yes" in their ~/.ssh/config. People do all kind of crazy things :-)
Jun
28
comment Is it really secure to connect to a server by SSH from hotels during a journey?
@kasperd: Well, if the connecting client has agent forwarding enabled even public key authentication can provide the full MITM experience. But yeah, public key authentication is definitely preferable to regular passwords, any day.
Jun
28
awarded  Enlightened
Jun
28
awarded  Nice Answer
Jun
28
comment Is it really secure to connect to a server by SSH from hotels during a journey?
@Hagen: Well, technically you are right. In practice I'd say it's all about where you want to draw the line security wise. I'd argue that it's an huge difference in making a one-time gambit over a local network you mostly control vs. doing the same on a random wifi. Still, I'm all for making that initial gambit less of a risk; using ssh ca certificates, dnssec+sshfp, or something else. Just felt that that was a bit out of scope here.
Jun
27
comment Is it really secure to connect to a server by SSH from hotels during a journey?
Assuming the caveats in the answer, yes.
Jun
27
comment Is it really secure to connect to a server by SSH from hotels during a journey?
What half RSA-key? The public part of the ssh host key? Half of the private part of your user ssh key?