Reputation
961
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 10 23
Newest
 Caucus
Impact
~113k people reached

Sep
16
comment How to run Different congestion control algorithms in FEDORA 17?
Not on Fedora 22 it seems. That was also my reflex, but after installing it, only DCTCP is available as a module, the others (which are compiled as modules by Fedora, e.g. YEAH, LP TCP, SCALABLE TCP, etc.) are not installed with this package.
Sep
15
comment How to create an SHA-512 hashed password for shadow?
Good point, but man crypt tells me PBKDF2 is not supported.
Sep
15
answered Why Kernel Shared Memory is 0 on Ubuntu 12.04
Sep
9
comment Running apt-get autoremove with ansible
On Ubuntu, if you don't do regular autoremove, then your /boot might fill up until it is full! Mostly autoremove has only removed older unused kernel. Because, this needs regular check, it ought to be automated. :-) On Fedora/RHEL, you can instruct yum/dnf to keep only a certain number of package (like 3 kernel versions), so you never have this problem.
Sep
9
comment Running apt-get autoremove with ansible
Problem with your "sed" string is that it is not "portable". The execution of apt-get --dry-run autoremove | grep "to remove" returns on Ubuntu 14.04, 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. but on Ubuntu 15.04 it returns 0 to upgrade, 0 to newly install, 0 to remove and 0 not to upgrade. which your sed doesn't match.
Sep
1
awarded  Caucus
Aug
14
awarded  Excavator
Aug
14
revised How do I find if there is a rogue DHCP server on my Network?
Link was broken, it is now corrected
Aug
14
comment How do I find if there is a rogue DHCP server on my Network?
@JasonS Hi I've updated the link, but the changing is pending peer review... While waiting you can find it here: bitbucket.org/secdev/scapy/wiki/doc/IdentifyingRogueDHCPServers
Aug
14
suggested approved edit on How do I find if there is a rogue DHCP server on my Network?
Aug
10
comment Generate entropy for PGP key
@Kevin yes you are right, entropy pooling or harvesting are perhaps two distinct ways of "seeding" the PRNG. And after some testing on my BSD box, I've found out that random and urandom behave the same way, they block when they cannot generate good enough PRNG. Try running dd if=/dev/random of=/tmp/rndtest bs=64M count=1 after a fresh boot, it took 2 consecutive runs to see the time to generate the 64MB file increase. I thought I would not see this effect with urandom as input, but FreeBSD seems to be blocking as well with it, unlike Linux.
Aug
10
comment Generate entropy for PGP key
@Kevin I read it already because you made me doubt. But no I stay by my word. The man page state that when there is enough entropy kern.random.sys.seeded is equal 1 and a call to /dev/random is not blocking. Similar to Linux, a call to random when the pool is not empty is non-blocking. Now if the the entropy pool is too low (considered unsecure) FreeBSD set the variable to 0 which will block /dev/random similar to Linux again. So sorry to say it but I stay by my word and the man page you linked just confirms it.
Aug
10
comment SELinux: cannot confine Firefox process to mozilla_t domain
Hi, did you find an answer to your problem?
Aug
10
answered Generate entropy for PGP key
Aug
10
comment Generate entropy for PGP key
On Linux you can generate more entropy by simply pinging a host (e.g. ping 8.8.8.8) if you own another network host try to have pings every 100ms (if your RTT is <100ms of course ). And/or use find to look for files on your hard disk and flush the RAM cache between each file search.
Aug
10
comment Generate entropy for PGP key
Take care with Haveged in virtual environment. It can be suboptimal depending on the hypervisor configuration. Check this page: wiki.archlinux.org/index.php/Haveged#Virtual_machines
Aug
10
comment Generate entropy for PGP key
I don't think that using urandom as a source for rngd is clever. It will help deplete the entropy available faster and once depleted it will be a biased source for entropy. So I would avoid this solution.
Aug
10
comment Generate entropy for PGP key
@Kevin /dev/random are high quality PRNG on modern BSD and Linux, sure. But it will block if there is not enough entropy available. On the other side, /dev/urandom will not block if there is not enough available but its randomness quality might suffer in this case. In the details there are many subtleties between random and urandom implementations between Linux and the various BSDs, but the above should be true on all AFAIK.
Jul
31
asked Opening a port to access a service in an isolated LAN
Jul
31
answered Opening a port to access a service in an isolated LAN