7,557 reputation
12251
bio website tltech.com
location United States
age 35
visits member for 5 years, 4 months
seen 15 hours ago

{{Hacker}}

I own a small, successful security consulting business. But by day I work for a really big company, doing really big things.

Nothing I write here represents the views of my employer, nor does it reflect any proprietary or confidental knowledge. In fact, practically all of it was written before I even started working there, so don't get too excited.


Jun
12
awarded  Notable Question
Jun
7
answered SSH connection with public RSA key
Jun
4
answered SPF TXT records - do I need to include sub domains for an outsourced sender SPF record
Jun
4
answered Timezone inaccuracy
Jun
3
comment What to use instead of FTP
@Stephane FWIW, there is no rule against linking to projects or software as part of your answer unless you work for the organization responsible for creating it. In which case, you can still link to the project, you just have to disclose your relationship (and not be spammy about it).
Jun
3
comment What to use instead of FTP
I don't think you're wrong, but you end up with a lot of conversations that sound like this: Them: The ___ keeps ___ing. You: Then stop using FTP. Them: What do I do instead? You: Well... have you considered a job in the food industry? --- I'd like to be able to help a bit more than that.
Jun
3
comment What to use instead of FTP
@Stephane if you know of a simple way (or product) for a novice to add SFTP access on Windows servers without requiring shell access, then by all means post it as an answer. That's what we're here for, after all.
Jun
3
comment What to use instead of FTP
@MichaelHampton I don't recommend running Windows at all. Which is why this question isn't about my servers.
Jun
3
comment What to use instead of FTP
@MichaelHampton It violates the principle of least privilege and dramatically increases your attack surface and risk of escalation. Allowing flash videos to be embedded in PDF documents is theoretically safe, but it's crazy-dangerous in the real world.
Jun
3
comment What to use instead of FTP
@Stephane By "set up" I'm referring to server-side set up, not client-side. I'm intimately familiar with the protocols, having myself written implementations for many of them including WebDAV and FTP. The core of the question isn't "what should I use on my server", it's "what should I encourage beginner admins to use on their servers." SFTP very critically relies on shell access; the only way around it is to create a modified restricted shell (e.g. rssh) which pretends to be a shell but only allows you to run SFTP-related commands. This is non-trivial to set up on Windows.
Jun
3
comment What to use instead of FTP
@Stephane SFTP is perfectly reasonable if it can be done without granting shell access (which typically isn't the case). DAV is perfectly reasonable if it can be simple for a novice to set up and secure (which typically isn't the case).
Jun
3
asked What to use instead of FTP
May
31
awarded  Yearling
May
23
answered Redirect Outbound HTTP to port 53 iptables
May
23
comment How to forbid non-UTF-8 filenames?
@lvella OK, you do that.
May
22
answered How to forbid non-UTF-8 filenames?
May
22
answered Why does grepping ps [p]rocess_name exclude grep from the results
May
14
comment Extending a PaGP EtherChannel run beyond the maximum ethernet length
Maximum run length for ethernet is not a matter of signal strength, it's packet transit time. If you exceed your maximum length, then a small packet can be 100% "in flight" on the wire, and the CSMA/CD algorithm in Ethernet is built on the assumption that this will never happen. Packet-collision chaos ensues.
May
14
awarded  Caucus
Apr
30
awarded  Popular Question