59,452 reputation
1073148
bio website bsd-box.net/~mikeg/blog
location New York, United States
age 32
visits member for 4 years, 3 months
seen 9 hours ago

Generic sysadmin. Hack coder. Jack of all trades, master of some.


Please Note:

I expect you to read any reference material I link to in my answers. If the answer to your question is contained in said reference material and the reference source is not likely to disappear I will probably not cut and paste it onto SF unless it's really cool/interesting/obscure.
In return I promise not to link anyone to goatse or tubgirl

I expect you to think for yourself and do a little thinking (and mayhaps even some work) to solve your problems. If you aren't capable of this, please exit the profession via the door on your left.
In return I promise to do my best to aim you in the right direction, and to clarify any points you have trouble with


Apr
8
comment Heartbleed, which specific services must be restarted?
@xref It is possible that there's an upgrade process I'm not aware of that rewrites the file in place (in which case you have a valid concern -- if you're worried about that just leave off the |grep DEL bit and work from the full list)
Apr
8
comment Heartbleed, which specific services must be restarted?
Re: the lsof trick, it doesn't matter if the version number of the library changed: When the .so file is replaced the old inode becomes unlinked (DELeted, in the lsof list). The file is not rewritten in place by any package manager or install program that I'm aware of.
Apr
8
answered Heartbleed, which specific services must be restarted?
Apr
8
comment Heartbleed: What is it and what are options to mitigate it?
Indeed - after any kind of major patch (like OpenSSL) I consider it a good rule to just reboot the machine to make sure you don't miss anything.
Apr
8
comment Does Heartbleed affect AWS Elastic Load Balancer?
I've been trying to get a straight answer to this one myself. This forum post implies yes, but it's not from an official source so I'm not sure how far I trust it (except that when in doubt I'd lean toward assuming compromised over secure).
Apr
8
comment Heartbleed: What is it and what are options to mitigate it?
+1 for SHUT. DOWN. YOUR. SERVERS.* -- If you do ANYTHING where SSL is really important, shut it off until you fix the issue. Also don't forget to install new certificates (with new keys) after you patch your servers - reusing your old keys (which may have been compromised) defeats the whole purpose of patching the vulnerability...
Mar
28
comment Delete TFS Project Collection - SqlException
@Ian Yeah the exception seems to be the important bit - unfortunately I too know very little about the inner workings of TFS (but having seen the inner workings of other products I think keeping it that way may be best for my sanity...)
Mar
28
reviewed Leave Open fail2ban with PermitRootLogin without-password?
Mar
28
answered fail2ban with PermitRootLogin without-password?
Mar
28
comment Delete TFS Project Collection - SqlException
I appreciate you attempting to provide us with detailed information (logs are generally good), but dumping the whole log on us doesn't really encourage people to help you - it makes us go "Yeah, I'm not reading all that (at least not for free)". -- Can you do a little further investigation on your own and pare this down to the relevant details (errors and warnings) rather than the current everything that ever happened to the system ever since the dawn of time log? :)
Mar
28
comment bad ownership or modes for chroot directory component
The requirement is on the Path Components (/, /var, /var/www, and /var/www/RESTRICTED_DIR must all meet the security requirements above). It is a true chroot (review the man page) - your user's home directory needs to exist within the chroot, as must /bin & all the other things your user will need...
Mar
27
revised bad ownership or modes for chroot directory component
added 72 characters in body
Mar
27
answered bad ownership or modes for chroot directory component
Mar
27
comment Blank lines not served in static, non-HTML files
@St0rM Wow - I've literally never seen Apache do that. Do you have some "optimization" or "acceleration" modules in your configuration? (Also I owe you real currency - would you like a rupee or a ruble? :)
Mar
27
reviewed Reviewed IIS using ADFS/Saml to Authenticate
Mar
27
reviewed Leave Open How to check the existence of an email address in yahoo without sending
Mar
27
comment How to check the existence of an email address in yahoo without sending
I'm giving you the benefit of the doubt here and assuming that you are not a filthy, filthy spammer --- please don't make me regret that.
Mar
27
answered How to check the existence of an email address in yahoo without sending
Mar
27
answered Blank lines not served in static, non-HTML files
Mar
27
reviewed Leave Open Powershell - Retrieve current domain user's full name