Hi all. I'm pretty sure this isn't a question to ask on the site, but I can't seem to find out the answer. I'm trying to get the information on how the University of Central Florida data breach occurred. Where do I go looking for that, or would they not release that information ever?
I have a rather huge recursive function (also, I write in C), and while I have no doubt that the scenario where stack overflow happens is extremely unlikely, it is still possible. What I wonder is whether you can detect if stack is going to get overflown within a few iterations, so you can do an ...
Yesterday I found a spam mail in my inbox. I inspected it in order to find out why DSpam and SpamAssasin failed. You can find the raw German mail here, here's a translation:
Good Morning. We got to know each other on the website of acquaintances. I want to continue communicating with you, tha...
@MarkBuffalo if you're interested, this is the context space.stackexchange.com/q/13913/49 ... mind, I've already repcapped today so this is not rep whoring. If it was, I'd say it is LOL
@MarkBuffalo I'm not sure this was it, but someone sent a mail to a co-worker using the name of one of our suppliers and he didn't open the attachment because he looked at the address and it was not the usual one. Maybe someone else fell for it.
Think we just found a new target for @ThomasPornin.
Such sacrilege!
@AviD What's with the Stitch onesie that's featured from 2014-03-11 to 2014-03-13? Pretty sure it's the first time I've seen it, and you'd think something like that would get an in-comic mention.
And FFS I wish Sohmer and Lar would get with a more sensible dating format in their comic images. Two-digit years? DD.MM.YY, really? Makes me wanna puke. (Sidenote: Why's it always "Sohmer and Lar" and not "Sohmer and Desouza" or "Ryan and Lar"?)
Still, I tell my daughter "You're old enough to play D&D when you're old enough to not annoy the other players." (Note: I said "players", to the implied exclusion of "GM".)
@MarkBuffalo yes (since a few weeks ago). Make sure the latest revision of your post doesn't have confidential information, and flag and ask to have older revisions redacted.
Currently we use at my workplace svn export <svn_repo>. This takes a long time and I have been playing with the idea to keep the revision history on the production server so we can simply fetch the updates.
In practice I was thinking to have a checkout folder with the code. Once I want to deploy...
@MarkBuffalo I don't see a problem, except that the user is clueless and obviously shouldn't touch any of that. But it's not really clear which organization or which specific server.
@kalina Well, mostly for his own sake, and for his employer's sake. The guy lists a potentially insecure setup, says he works for the government. A little digging around gets you the information you're looking for... and the OP seems like he's in charge of these kind of decisions, since he's the one making design changes like that
@MarkBuffalo you know the best way to do those is not actually to ping a CM in a chat room (unless they are currently active). Best is to speak to mods first. If mod not appropriate, use contact link at bottom of the page. And if pinging in a chat room, include the reason on the ping line - otherwise they will just see "You there"
@kalina I don't have anything that runs USB-C. People have been asking me why we haven't been using it. I have been telling them its because they touch themselves at night
I like this question because I do something similar with distributed RCS (mercurial), so I can just "hg push" changes to the server (and yes, the webroot is a subdirectory of the repository). — drewbenn9 mins ago
Because if the production server, which is usually separate from everything else, contains a vulnerability, then checking out infected files from the production server means your entire enterprise is pwned
@RоryMcCune I'm assuming that if the web dev can't grasp basic things such a separation of concerns, then there may be other vulnerabilities, some of which could allow write access outside of the specified location
And if there's a problem with the web server itself, they can no longer confine the damage to the production server
@MarkBuffalo sure it's possible but I usually find when discussing the impact of problem (a) it muddies the waters to assume that in all cases it will lead to problem (b) which is more serious, as that's entirely situational
otherwise you'd end up saying "user has bad password" "ahh I can pwn their entire company as people with bad passwords tend to also leave their SSH servers on the internet on default ports with that password"
@MarkBuffalo mods can't delete history. Only CMs. I agree that the OP shouldn't have put the info they did, and I like the edits you made, however it's probably not enough to actually make him a major target, as most contractors working for governments probably do exactly the same
Yesterday I found a spam mail in my inbox. I inspected it in order to find out why DSpam and SpamAssasin failed. You can find the raw German mail here, here's a translation:
Good Morning. We got to know each other on the website of acquaintances. I want to continue communicating with you, tha...
