Reputation
12,681
Next privilege 15,000 Rep.
Protect questions
Badges
1 18 52
Newest
 linux
Impact
~541k people reached

Jun
10
reviewed Approve Squid blocks automatic updates - antivirus and java
Jun
9
answered IIS URL Rewrite Outbound rule server variable explanation
Jun
9
comment Do I need a subscription to install and use RHEL?
Also... Fedora/CentOS.
Jun
8
comment Is using a PCI-E SATA Controller equivalent to the onboard controller
The on-board SATA controller is "broken", yet the rest of the motherboard is 100% intact and functional? Sounds unlikely.
Jun
8
comment Certificate common name invalid
*.example.com does not match example.com
Jun
5
answered Caching UDP packets with iptables
Jun
5
answered NGNIX 1.6.2 on Debian8: Won't start after adding SSL
Jun
4
comment how to prevent non-admin user to gain admin access using overflow
You just can't let go can you?
Jun
4
comment how to prevent non-admin user to gain admin access using overflow
It's light on details, but it's right there in the title: Windows Kernel.
Jun
4
comment how to prevent non-admin user to gain admin access using overflow
@jimb I said vulnerable. Vulnerable. Vulnerable to an attack. The BIOS, OS, or some process has to be vulnerable to allow for user land processes to escalate privileges through a stack or heap overflow. You just posted a vulnerable system process. Congrats, you agreed with me. I never said that the end user has to have admin privileges to exploit a vulnerability. That's why it's called privilege escalation. Go take your bull elsewhere.
Jun
4
comment how to prevent non-admin user to gain admin access using overflow
@JimB: That's a hardware (actually, BIOS) vulnerability, which is effectively running at above OS privilege levels.
Jun
4
comment how to prevent non-admin user to gain admin access using overflow
@JimB Which stack or heap overflow allows for privilege escalation without requiring a privileged process to run the code in the overflowed memory space?
Jun
4
comment how to prevent non-admin user to gain admin access using overflow
@strongline No, it isn't.
Jun
4
comment Disable cipher suite or change priority in apache based on IP address
@SteffenUllrich "You would allow the poor cipher globally". Read. It's certainly not perfect, and I would prefer to just have a separate VirtualHost altogether, but it's an option.
Jun
4
comment Disable cipher suite or change priority in apache based on IP address
@SteffenUllrich It should re-negotiate based on the path if the current cipher suite is no longer allowed. You would allow the poor cipher globally, then disallow it on other directories. Also, you should look up SNI. It's pretty cool, and the reason why we don't need dedicated IPs for SSL/TLS servers anymore.
Jun
4
answered how to prevent non-admin user to gain admin access using overflow
Jun
4
answered Disable cipher suite or change priority in apache based on IP address
Jun
3
answered Use WAN as internal network
Jun
2
revised CORS in Nginx 1.2.1 (Debian 7)
Corrected the IPs to conform to RFC5737 for documentation ranges.
Jun
2
comment Is it possible to use HAproxy in this scenario?
Sure, they just can't use the same port. Make Apache port 8081 or something, and proxy everything through nginx