Recent content by Zigara

Learning about security concerns and how to fix them yourself is a lot more rewarding than having someone do it for you.

I would certainly hope he is not the sole developer on that project after reading this code. It doesn't matter if it's 'internal', it's really basic security practices.

It's alarming how lightly you take the security concerns. I don't see anyone taking this project seriously in that case.

https://github.com/KuJoe/KToYS/blob/master/functions.php#L95 https://github.com/KuJoe/KToYS/blob/master/admin.php#L54

This. I found a SQL injection nearly instantly.

Happy birthday, you old bastard! Fran will understand. Franties. (old inside joke)

Yes, they need to setup the initial ssh keys, hostname, etc somehow.

Debian and Ubuntu packages are signed. It's not as if your provider can force an update into your machine. You seem to also be forgetting the fact that your provider has 100% access to your VM's memory, filesystem, etc..

I was already not impressed with his mock-ass Ruby web demos with no application logic, then I saw https://www.virtkick.io/become-a-sponsor.html and tried out the 'core' he plans on ripping. He plans on using https://github.com/retspen/webvirtmgr as a 'core'...

:popcorn: That says a lot about how you run your ship.

Yes, he released a few trial VM's a week ago.

Quite unprofessional. There was a splash page with a countdown, but he removed it and put 'Coming soon!'. I'm also quite confused why he is using EUR, he is an american based company. Edit: The banner has been up since before July 26th. He has been saying 'soon' and 'too busy' for quite some time.

What is not easy about VirtualBox networking? It's really straight forward. VBoxHeadless is actually pretty nice, but I'm not sure it's really designed for large deployments on a single node. Though I've not looked much into it.

Oktay K.

AWS Route 53