@Nick it's pretty smart, even if the servers can't ping external IPs, this will have a timeout of 1s. You can measure if the webserver takes 1s longer to respond
I've been digging around the webs for a bit since I first posted this question.
According the original discoverer of the bug, bash prior to the CVE-2014-6271 patch imported a function such as:
foo=() {
code
}
by replacing the equals sign with a space and interpreting it... which meant inter...
@Nick depends on the amount of data, a lot(100k+) of small files should be ok. but if you want to store a lot of changes (TB wise) , might be too slow on CPU + USB.
Strange as it might be to contemplate, but imagine what would happen if AWS went into receivership and was shut down to liquidate assets? What would that mean for your infrastructure? Project? Or even startup? It would be pretty bad....
So apparently the issue that my mouse was registering as a mouse+keyboard and blocking my actual keyboard was because I was plugging it in a USB 3 port... plugging it in USB 2 still registers as both but doesnt block my keyboard
on an not-that paranoid mode: i had a cheap mouse once with some virus included in the driver (actual virus, not false alert). still funny to see that happening.
@Bob hmmm maybe the mouse itself did have one of the tiny cds forgetting the name :p but wont even bother to try inserting it... I dont have an opical drive anyway
input,hiddev0,hidraw2: USB HID v1.10 Mouse [BTL Gaming Mouse] on usb-0000:00:14.0-14/input0 input,hidraw3: USB HID v1.11 Keyboard [BTL Gaming Mouse] on usb-0000:00:14.0-14/input1
I'll propably add a udev rule to block it just because im paranoid
Hey, if the shell I use to manage a machine that uses bash won't allow me to run commands like export to test for shellshock, is there a way for me to test it by using a login argument with telnet or ssh?
@ewwhite A mirrorlist downloads a list of mirrors and yum picks one. If it's slow or down, it moves on to the next one. A baseurl is just one possible mirror and it won't move on to another one.
@NathanC I did that once by accident when I didn't release resources properly in a batch file operation. I overloaded the number of allowed open connections, and it caused that error on some clients.
I'm trying to create a "corona" effect (like the sun's corona) in an image using gimp, but i'm having trouble editing only the alpha channel of the image.
I want the RGB to be pure white (255, 255, 255) and the alpha layer to have a brush effect applied to it. I know how to use the brush, but no...
is anyone here running CentOS on Amazon EC2? I see there is a image for it but some people say it sucks because it only has one partition and can't be mounted into other instances. Should that worry me?
As a result of a number of recent Cryptowall outbreaks ay my current employer, I've been tasked with finding a way to stop it from happening again, basically.
The obvious solution would seem to be Software Restriction Policies, for which I've set up a test GPO - Unrestricted security level, but ...
@KitFox Friends are overrated anyway. Don't make friends, start calling up vendors... they're generally more available, and happy to pay for your food to boot.
I actually know a really good vendor who tends to do things for good customers like hiring a couple strippers for a birthday bash... vendor relationships are definitely more rewarding than friendships. :)
@MichelZ yeah, that would have been the smarter approach, in retrospect. Using myself seemed easier than installing a bunch of Enterprise crApps on a test VM, though.
Personally, I wouldn't mind a smart watch, seeing as how I wear an analogue one anyway... could be a useful way to avoid having to dig into my pocket for every little thing on my phone. Of course, so far, smart watches have been worse than my analogue watch, so hell with that.
Shellshock isn't even a particularly hard vulnerability to understand... You have variables, they hold data. Shellshock is a bug where that data gets run as a program.
@cole Best thing I ever did for 24/7 on-call was learn a bunch of exploits for our Cisco routers. "Oh, damn, I can't connect to the server... router must be down again. Wake up the network guy and call me back when he's got it fixed."
Oh, yes, lol. Because I was joking. Definitely joking, and not something I actually do to asshole employers who think IT guys should work unpaid overtime because... well, they just should.
I've been digging around the webs for a bit since I first posted this question.
According the original discoverer of the bug, bash prior to the CVE-2014-6271 patch imported a function such as:
foo=() {
code
}
by replacing the equals sign with a space and interpreting it... which meant inter...
