Search results

Apparently educating users on how simple, and dangerous this is is bad bad evil evil and it should be stricken from the record. It's not my fault people can't read simple c code.  Should I have posted the PoC? Yes. Why? To show how simple it is. The PoC code did not do anything harmful. Should...

That's lame. It was a test code, not a working way to exploit anything.  You can remove my account from this forum. Thanks.

CVE-2014-6271 - Remote code Execution through Bash

Removed Poc.

Their upstream providers all use BCP-38.. spoofing is pointless on modern networks.

Where did you 'read' this? Sounds like hyperbole. 

I would avoid using SATA drives in a RAID environment for these reasons: - If I remember correctly, SATA drives only have 1 outstanding write transaction at a time, SAS drives have as many as your Tagged Command Queue Depth (usually 128 or 256 depending on the drive). NCQ is not the same thing...

Some PERC controllers used to be LSI or Adaptec based, unsure if your specific controller. Can you see if it supports anything like I mentioned?

Decent RAID cards have the ability to use an SSD for caching for normal perpendicular SATA drives. It requires a license on the card. Depending on the content, it will be used. Please see: http://www.lsi.com/products/raid-controllers/pages/default.aspx#tab/product-family-tab-3 There are OS...

Parity calculations are brutal for SSD write exhaustion. The larger the drives, the more the parity is written for the parity disk(s). A large amount of SAS/SATA RAID controllers do not send trim commands because it will cause stalls with firmware bugs, plus all the ones that do support TRIM to...

You should really use apachectl's status output :)

And I stand by cPanel, watching for post-release bugs and waiting for a minor version change is much more efficient than heeding to the demands of the masses who think 'newer is better' but can't read a changelog or wonder why their drupal/WP/Joomla/et al is broken with a newer version of PHP.

Do you realize that in software engineering there's such a thing called 'it's too soon for a release'? Look at the nightmare people went through for demanding PHP 5.x when they were stuck on 4.x, only to upgrade and find it broke their applications due to sudden API changes, deprecated features...

First thing you should do is examine your 'site' or 'server' and do overview of configuration. Some tips: - Google Chrome's Debugger can 'audit' the webpage to give tips on speeding it up - Use gzip compression if you can, since smaller chunks of data (=< MTU) won't fragment and give a nice...

Filtering /24 via prefix list would cause that specific route to not be installed so a more generic route (default route, or larger route will be use) , remember the specifics usually win, then if not, the default route is used or the larger allocation.  Considering these 2 situations...

Most ciscos will flap because memory is exhausted. Only solution is to stop accepting /24's, which is what it should have been all along.

The 'man' page.

mount -o remount /partition run dd..  when you remount the partition the VFS cache layer is blown up and rebuilt, otherwise you won't get consistent results.

Cisco is pretty good, but if you want to piss off your sales rep, simply say you're also getting quotes from Juniper/Force10 and they will bash them which is unprofessional.  Personally, I use netgear layer2 devices as they are generally affordable and 'work' out of the box. For layer3...

I can't speak for Brocade anymore because their stuff is still buggy, and I don't know anything with Ubiquiti.  Back in the mid 1990s, the first true network device i ever messed with was a 7206VXR, which was a pile of shit in a way because of it's crippled hardware<->software. It was massively...