« first day (339 days earlier)      last day (4839 days later) » 

this.josh
this.josh
06:41
@ScottPack Worth while. However makes me think that the post WWII division of Europe may have started as a series of jokes which translated poorly.
@Ninefingers It doesn't work so well for me. 'Is this secure?' Me: No. 'Ok, make it secure, you have two weeks.'
'Can we finish this on time?' Me: No. 'Ok, write a white paper describing the technical challenges. One for the customer and one for management. The deadline is extended two weeks and this one CAN NOT SLIP.'
"Can you do this within the current budget?" Me: No. "Find an 80% solution we implement with the current budget. You might want to reasons in your pocket about why the 20% drop is acceptable"
 
6 hours later…
Karrax
Karrax
12:42
I'll just drop this here :) I thought it was funny: i.imgur.com/4CpAH.jpg
 
2 hours later…
Scott Pack
Scott Pack
14:24
@thisjosh I hadn't considered that possibility, but in truth it is the only situation in which that treaty seems reasonable.
 
3 hours later…
Ninefingers
Ninefingers
17:24
Anyone have any thoughts on this:
for here? (cc @kev)
10
Q: What considerations should I make for securing subversion?

Brandon MooreCurrently I am using VisualSVN and it's only accessible on my home network. Eventually there will be others accessing it, but for now it's just me and I would like to be able to go down to the coffee shop (or wherever) and be able to work away from the house. After doing a few web searches on t...

windows security svn
I can't see any existing questions on the topic, either: security.stackexchange.com/search?q=svn
 
3 hours later…
Ninefingers
Ninefingers
20:03
Anyone?
M'vy
M'vy
20:20
?
subversion over ssh?
 
1 hour later…
Gilles
Gilles
21:32
0
Q: Custom live distro - ways to detect it is running inside virtual machine (or prevent running in VM altogether)

knefI am creating a custom live distro that will be a specialist work environment for those of my employees that are on the road. I am looking for ways to detect or, ideally prevent, that my live distro is being run inside a virtual machine (I am only worried about Windows desktop virtualization lik...

livecd virtualization
Does Sec.SE have a canonical question on detecting that a program is running in a VM?
Scott Pack
Scott Pack
21:55
@Mvy Indeed. I've never setup svn to not use ssh. Of course, I've never used svn where the users having shell accounts was a problem.
M'vy
M'vy
@Gilles not sure of this.
@Scott usually you can also use SSL if you just worried about server auth
Furthermore I guess VM are smart enough to disguise as a good real machine. But I might be mistaken
Gilles
Gilles
@Mvy timing is hard to disguise
The absence of unusual hardware is also a good indication (it could be disguised but rarely is)
Scott Pack
Scott Pack
@Mvy I know of people that run theirs over https, so I presume that means they're fronting it with Apache.
M'vy
M'vy
yep
CollabNet does that by default
Gilles
Gilles
@ScottPack at work, we do svn over https
I think the access rights (who has access to what branch) is managed at the Apache level
 
2 hours later…
this.josh
this.josh
23:37
Security for source code/SCM is a very complex topic. Some notes on the Kernel.org compromise lwn.net/Articles/458099

« first day (339 days earlier)      last day (4839 days later) »