how to create & grant a normal user like 'sybase' with root privileges?
i found useradd, adduser, passwd to be useful, but are there any other files to modify to get 'root' like privileges so that user can do installation tasks.
@Iszi So I notice that she didn't downvote to oblivion all of those posts :)
It's taken me a long time to convince, developers especially, that no matter what they call their environments, any environment that contains live data needs to be treated as production.
In other news, developers will eventually accept (if not understand) that the data stored within the environment is what determines what level of access control is used :)
@Iszi Now that is a topic that will trigger a nerd rage in me.
This idea is spawned from @ScottPack's post in the thread about distinguishing blog posts in Twitter:
How should we distinguish blog posts in the Twitter feed?
I think it could bring a bit of publicity (and, hopefully, more traffic - and, consequently, more users) to the site if we added the #i...
I have a pc at work with Fedora 14 on. For security/administrative/whatever reason, the IT guys did not give around the password for the root user, but instead, if needed they create a specific suXXX user with root permissions.
The entry in /etc/passwd looks like this:
su9705:XXXXPASSWORDXXX:0:...
sighs I started editing a post to fix some glaring spelling mistakes, and while doing it I read deeper and realized that it was clearly written by a non-native speaker.
Presumably SIEMs should help out there. Unfortunately, I really only have experience with enVision, so I can't speak to what SIEMs are actually capable of.
@Mvy Nagios is a great health monitoring tool, but unless it has a broader feature set than I know of (entirely possible), it won't really help much here.
I am looking for a framework/solution for authentication/ user-login management/ security in java web application that can make the naive developer's job easier/faster and make the application relatively more secured against potential threats.
P.S. : I'm using JSF 2.0 as the front-end devel...
@RoryAlsop I wrote it very quickly last night, start to finish, so I'm not surprised if it contained an error or three!! @AviD I think it depends. My personal opinion is that itsec and physsec people probably have a different set of needs as communities even though they have things in common, but I'm probably not the best person to ask and I'm not the only person to ask either, hence asking the questions I did.
Yesterday, Alex Miller posted over on Meta.SO about a potential match-making service between our developer and user communities (namely Android, Apple and gaming enthusiasts). You can check out his original post, but the gist of it is that we have great developers and user communities on the site...
Let's say I update my IE8 to IE9 through Windows Update.
Then, I remove IE9 from my computer using the "Turn Windows feature on or off" panel.
The IE application will be gone, but will my IE core still be IE9 or will it have rolled back to IE8?
I'm asking this because, while want the IE applic...
@TheEvilPhoenix Thanks. Didn't know the place existed. If this room was a little more crowded and a bit more often off-topic, I'd say we should have our own version.
Most of these now work. My comment below has the following markdown source:
On [main], you are expected to write proper English (as advertised on [english.se]), but here on [metaso] it's more important to have freehand circles, so please [edit] your post, otherwise I'll have to flag you (see ...
Okay... This just amps up the WTF factor for that one question...
> I don't want to rollback the IE version, I want to remove the IE application, while retaining the latest version of the core for security. – asmo 2 mins ago
This proposition has reach is critical mass with regard to the "IT Security" scope. All the site is now branded over this specific topic, design as well as some other support (I don't know if they already planned T-Shirt, business-cards, etc).
This makes me worry on two things about the scope br...
@Iszi Oh, I get it, in the answer you linked to. No, it doesn't work in posts. I think this is because it would have been too disruptive for main sites (imagine e.g. posting a regexp for “a or u”), and it would have been too much bother to implement for meta sites only. Also the markup engine is different for posts, it would have been more difficult to add.
The site already covers the topics you ask about since they are all related to IT security. In particular it covers many aspects of physical security. Covering physical security is critical to IT security - how do you protect servers, laptops, disks, remote backups, transit etc without physical...
@Gilles Interesting and surprising. But I don't get the "a or u" reference. I got the impression that comments were rendered more dynamically than questions and there are more of them, so it would seem that fancy features would come last to comments
@nealmcb If someone posts [au] intending for it to be a regexp, you don't want it transformed into [au]
Ok, that's maybe a bad example, because you'd use code markup. But consider a quotation: “blah blah, and as a consequence wibble”, shortened a bit to “blah blah, Stack Overflow wibble”
In chat or comments it's ok to allow this kind of edge cases, but in an answer on, say, English Language and Usage or Writers it would come out of the blue and look really bad
Oh well, I guess security pros don't need to be lectured against complex interfaces (:
Many of our top users seem to have avatars with a picture of themselves in a car with what appears to me to be Paddington Bear:
So what is the story behind this?
I dont mean the special tags on meta, I mean regular tags on the main site.
very subtle, and didnt notice at my usual viewing angle till now - but now it seems very distinct, most are gre|ay font, but some are blue... just curious, is all.
no - got hectic at work, as well as trying to get my car fixed in time to drive our kit up to the festival on Saturday. Looks like not only cylinder head gasket and radiator hose, but also radiator core...all linked issues, cost and time increasing:-(
@ScottPack valves seem good, think they have concluded on the scope of the problem, and to be fair they have said if they can't give it back to me by end of day tomorrow they'll give me a loan vehicle for the weekend for free
@AviD from the blog post it looks like it should be almost a no-brainer
While merging onto the freeway my old Volvo sliced through its timing belt. That was a tense few days while the local shadetree figured out the condition. Something about "interference engines" and "piston clap".
@nealmcb From what I've read ARPA was a fusion of defense research, corportae research, and academics. Of course there are important parts after ARPA, like NSF.
@ScottPack Yes the defence concept was a geographically big, semi-decentralized, hetrogeneous network, with multiple independent routing options for delivery that would be robust against destruction of some number of nodes.
how to create & grant a normal user like 'sybase' with root privileges?
i found useradd, adduser, passwd to be useful, but are there any other files to modify to get 'root' like privileges so that user can do installation tasks.
Yes
#infosec works for me
Both
:-)
This idea is spawned from @ScottPack's post in the thread about distinguishing blog posts in Twitter:
How should we distinguish blog posts in the Twitter feed?
I think it could bring a bit of publicity (and, hopefully, more traffic - and, consequently, more users) to the site if we added the #i...
I have a pc at work with Fedora 14 on. For security/administrative/whatever reason, the IT guys did not give around the password for the root user, but instead, if needed they create a specific suXXX user with root permissions.
The entry in /etc/passwd looks like this:
su9705:XXXXPASSWORDXXX:0:...
Let's say I update my IE8 to IE9 through Windows Update.
Then, I remove IE9 from my computer using the "Turn Windows feature on or off" panel.
The IE application will be gone, but will my IE core still be IE9 or will it have rolled back to IE8?
I'm asking this because, while want the IE applic...
Most of these now work. My comment below has the following markdown source:
On [main], you are expected to write proper English (as advertised on [english.se]), but here on [metaso] it's more important to have freehand circles, so please [edit] your post, otherwise I'll have to flag you (see ...
The site already covers the topics you ask about since they are all related to IT security. In particular it covers many aspects of physical security. Covering physical security is critical to IT security - how do you protect servers, laptops, disks, remote backups, transit etc without physical...
Many of our top users seem to have avatars with a picture of themselves in a car with what appears to me to be Paddington Bear:
So what is the story behind this?
