Reputation
8,155
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
1 25 54
Newest
 Good Answer
Impact
~565k people reached

Jul
1
revised Unix Shell/SSH config to allow TCP port forwarding without showing a command prompt
added 624 characters in body
Jul
1
answered Unix Shell/SSH config to allow TCP port forwarding without showing a command prompt
Jul
1
answered How can I specify nameserver's port number in osx?
Jun
29
comment What is the different of 64-bit Architectures? Why there is more than 1 standard?
Indeed, if I were to give this question as a homework assignment, I would have worded it more clearly. Students have a hard enough time as it is.
Jun
29
answered What is the different of 64-bit Architectures? Why there is more than 1 standard?
Jun
27
comment tc u32 — how to match L2 protocols in recent kernels?
@brownian you think doing exactly the same filtering in iproute2 will be higher performance? It's the same kernel, same code path, same algorithms. As long as you don't accidentally do something like turn on connection tracking, you shouldn't see a difference. *tables can impact performance because it can do a lot of complex stuff. But that doesn't means that it will.
Jun
12
awarded  Notable Question
Jun
7
answered SSH connection with public RSA key
Jun
4
answered SPF TXT records - do I need to include sub domains for an outsourced sender SPF record
Jun
4
answered Timezone inaccuracy
Jun
3
comment What to use instead of FTP
@Stephane FWIW, there is no rule against linking to projects or software as part of your answer unless you work for the organization responsible for creating it. In which case, you can still link to the project, you just have to disclose your relationship (and not be spammy about it).
Jun
3
comment What to use instead of FTP
I don't think you're wrong, but you end up with a lot of conversations that sound like this: Them: The ___ keeps ___ing. You: Then stop using FTP. Them: What do I do instead? You: Well... have you considered a job in the food industry? --- I'd like to be able to help a bit more than that.
Jun
3
comment What to use instead of FTP
@Stephane if you know of a simple way (or product) for a novice to add SFTP access on Windows servers without requiring shell access, then by all means post it as an answer. That's what we're here for, after all.
Jun
3
comment What to use instead of FTP
@MichaelHampton I don't recommend running Windows at all. Which is why this question isn't about my servers.
Jun
3
comment What to use instead of FTP
@MichaelHampton It violates the principle of least privilege and dramatically increases your attack surface and risk of escalation. Allowing flash videos to be embedded in PDF documents is theoretically safe, but it's crazy-dangerous in the real world.
Jun
3
comment What to use instead of FTP
@Stephane By "set up" I'm referring to server-side set up, not client-side. I'm intimately familiar with the protocols, having myself written implementations for many of them including WebDAV and FTP. The core of the question isn't "what should I use on my server", it's "what should I encourage beginner admins to use on their servers." SFTP very critically relies on shell access; the only way around it is to create a modified restricted shell (e.g. rssh) which pretends to be a shell but only allows you to run SFTP-related commands. This is non-trivial to set up on Windows.
Jun
3
comment What to use instead of FTP
@Stephane SFTP is perfectly reasonable if it can be done without granting shell access (which typically isn't the case). DAV is perfectly reasonable if it can be simple for a novice to set up and secure (which typically isn't the case).
Jun
3
asked What to use instead of FTP
May
31
awarded  Yearling
May
23
answered Redirect Outbound HTTP to port 53 iptables