2,866 reputation
827
bio website hr.linkedin.com/in/…
location Croatia
age 34
visits member for 4 years, 1 month
seen 20 hours ago

Linux Systems Engineer and Security specialist

  • tuning
  • code auditing (PHP primarily)
  • Scripting Ruby,Python,sh,bash
  • troubleshooting and debugging / black box testing apps / systems (valgrind,gdb)
  • intrusion detection, intrusion prevention
  • extensive experience with horizontal scaling using HAproxy
  • MySQL scaling/clustering
  • extensive experience in high performance environments running on Apache,NGiNX,Lighttpd
  • forensics
  • hardening

1d
comment Executing a python script through php button
alternatively you could use system instead of exec to avoid need for echo as seen in comment above
1d
comment Executing a python script through php button
try echo exec("python /var/www/open.py");
1d
comment How to merge modsecurity rules?
can you explain what you want this new rule to do in some plain english
1d
comment How do I check if my VPS participated in a brute force or denial of service attack?
what data do you have available from 2 days ago ?
2d
revised Passing variables problem - Bash
added 2 characters in body
Mar
25
reviewed Approve VMware - persistent “Host memory status” alarm in vSphere
Mar
25
reviewed Approve How to detect if InnoDB has pool size big enough?
Mar
25
comment Blocking Low-bandwith layer 7 attack
just curious; why are requests 503-ing? I'd recommend to get a full traffic capture using tcpdump and then carefully examine it with wireshark or something before you start planning defense. You could use mod_security to defend against malicious requests and cut them off if some condition is met, but to figure out condition you will need to study traffic in bit more detail
Mar
25
comment Modsecurity oddity
At the same time you had SecServerSignature set ?
Mar
24
answered Modsecurity oddity
Mar
10
reviewed Approve How to log extension header in postfix log?
Mar
10
reviewed Approve No acl on nfs mount in linux?
Mar
10
reviewed Approve How can I set the default permissions for files uploaded by apache2?
Feb
21
reviewed Approve How can i create an install a domain signed certificate in IIS using PowerShell?
Feb
21
reviewed Approve HTTPS request works to Linux, not to Mac, sometimes
Feb
21
reviewed Approve LVM module from puppet forge randomly breaks applying manifest
Feb
21
reviewed Approve Wget, self signed cert and --no-check-certificate not working
Feb
16
awarded  Yearling
Feb
12
comment Finding text and deleting file
this is dangerous, very dangerous. Because you pipe what was found to xargs and delimiter is ' ' rather than null specially crafted file path can lead to deleting unwanted files.
Feb
3
comment Backup script to FTP with timed subfolders
because script is different every time since it has dynamic component "$TIME" which needs to be redefined every time and then supplied to FTP client to do slightly different set of commands than last time.