Collaborate Disseminate
I’m starting node.js on my server. I have to start the node.js HTTP server as root, because it will listen on the port 80. Once i start the node.js on port 80, if a person is able to execute some code on my server trough the … Continue reading An application started by the root user has root privileges?
Is there a common place where we can download all the root CA certs and get frequent updates for changes? This is one place where we can find the CAs, but we need to keep on checking for the updates. Are there any other place… Continue reading Where to get all the root CA certs?
Having MySQL using auth_socket as default authentication mechanism for the root user scares me, so I change it to password authentication with rigid controls on password quality and documentation.
If a user manage to have ro… Continue reading Can root user have access to MySQL data?
Facebook’s Android app suddenly started making a bid for superuser access. Conspiracy theories popped up like fungi. (It’s now fixed.) Continue reading Facebook conspiracy theories after Android app tries to “get root”
Bring out your disco ball, your leg warmers, and your VHS tapes! While a lot of us watch the VH1 hit “I Love the 80s” for pop culture, I’m always drawn to the old tech. As such, let’s focus on bringing old hacking tricks t… Continue reading Hacking Retro
Okay, so I have a bunch of bash & python scripts that I’ve written, all just chilling together in one big directory. Well, actually there are separate subdirectories, but they’re all nested in this main directory.
So for … Continue reading chmodding files with an SELinux security context / ACL
This question already has an answer here:
Why does GoDaddy have four different certificate chain, G2, G3, G4?
1 answer
Few months ago some of my websites got hacked. The FTPs seemed to be empty, I was getting 403 error when trying to load the sites. If I tried to load the backups of my FTPs and checked the filesystem, all the files was there…. Continue reading Malicious PHP code deleting all the files on the FTP [on hold]
I asked this question on Unix Stackexchange. How to access /root directory from a browser?
I got an answer (in a comment by @dsstorefile) that It can be accessed either way :
By running chmod 0777 root
By running browser a… Continue reading Possible Security threats and mitigations while accessing `/root` through any browser?
On this Microsoft page, they mention that a new feature in Windows 10 is that it can stop trusting root certificates using the Disabled and NotBefore properties. What is the exact meaning of these properties, and how does dis… Continue reading What do the Disabled and NotBefore properties do for root certificates on Windows 10?