Collaborate Disseminate
I made a very simple dashboard with HTML/PHP/JS (and a MySQL database) where some users (after a secure login with username and password) can access and insert some activities with details and attach a file in PDF format.
My dashboard is i… Continue reading PHP – How to block files access in specific directory from the external
While reading the manual page of setresuid() a question arose about the purpose of Real UID.
As mentioned in the man page:
setresuid() sets the real user ID, the effective user ID, and the saved set-user-ID of the calling process.
Unprivi… Continue reading Purpose of Real UID in spite of setresuid()
So the scenario is that we have a server shared with a number of users, with me being the server administrator and able to determine permission assignments.
The server is running a service on loopback interface which is only protected by a… Continue reading Is TLS needed on loopback for local security?
While browsing the internet on my laptop, I’ve allowed an internet site to access my location data. What I had expected was that it will show the name of my city based on my IP. I was quite shocked when I’ve seen the precise address of my … Continue reading Can any program discover my precise geolocation?
While trying to connect to my EC2 instance via ssh client, I got an error. I’m still able to connect from the option of AWS console : EC2 Instance connect
no supported authentication methods available server sent publickey,
gssapi-keyex,… Continue reading Issue with AWS ec2 instance ssh : error: AuthorizedKeysCommand [migrated]
Icacls is a Windows and Linux command-line utility that IT… Continue reading How to Use the Icacls Command to Manage File Permissions
I was reading the OAuth protocol docs https://datatracker.ietf.org/doc/html/rfc6749#section-6 where it implies that you don’t need a client_id and client_secret to refresh an access token, just a grant_type and the refresh token.
I was of … Continue reading refresh token without client_id and client_secret
Will it be possible for an app to read data in the background if it has media access permissions or even full storage access permission?
Assumptions:
Android 11 and above
Media and file storage permission (the highest permission)
App is fr… Continue reading Can apps access whatever data they want if they have the media or files permissions [closed]
Articles online say to set the .htpasswd file with read permissions, but what happens if my server gets hacked and someone can read the login details in this file?
Just wanting to know if this is true. Thanks.
Continue reading Is the .htpasswd file supposed to have read permissions? [closed]
Usually we place things in /opt so they are owned by root but normal users can execute it. This prevents normal users to modify the binary so they cannot execute arbitrary stuff. However, to put things there using sudo unzip something.zip … Continue reading /opt and sudo unzip to /opt, is it safe?