Re: Capsicum project: Ideas needed

2011-07-08 Thread Pieter de Boer
On 07/08/2011 05:42 AM, Ilya Bakulin wrote: > The question is: which applications should also be processed? I think > that the most wanted candidates are SUID programs and/or popular network > daemons. > But looking at gzip example I also think about text-processing tools in > general. I think tcpd

Re: FreeBSD 6 vs 8.1

2011-03-18 Thread Pieter de Boer
On 03/18/2011 09:35 AM, Mats Lindberg wrote: > So - after a while I've made some observations. My problem is > actually connected to arp. > > My config is very static so basically I want to turn off arp > requests. Somewhere in the startup scripts I did >> sysctl -w net.link.ether.inet.max_age=214

Re: Security Flaw in Popular Disk Encryption Technologies

2008-02-23 Thread Pieter de Boer
Jeremy Chadwick wrote: It's interesting that you classified this as a "feature" (in quotes), because there's nothing "modern" about said "feature". This issue has existed since the beginning of RAM chip engineering; I can even confirm this "feature" exists on old video game consoles such as the

Re: Security Flaw in Popular Disk Encryption Technologies

2008-02-23 Thread Pieter de Boer
Atom Smasher wrote: article below. does anyone know how this affects eli/geli? from the geli man page: "detach - Detach the given providers, which means remove the devfs entry and clear the keys from memory." does that mean that geli properly wipes keys from RAM when a laptop is turned off?

Re: Welcome to Hell / Mysterious networking troubles on FreeBSD

2007-11-24 Thread Pieter de Boer
Remko Lodder wrote: Joel V. wrote: Hopefully the situation will be fixed soon. One final question though: are there any quick steps one can take to protect their server from DDOS attacks like these? If someone wants to flood your network connection with packets there is nothing you can do abo

Re: ARP Spoofing

2006-09-03 Thread Pieter de Boer
Maslan wrote: I was trying to find a solution to ARP Spoofing on my local network, i've tried to use IPSTEALTH option, but this didn't help. Is there is any solution for preventing the ARP Spoofing inside the kernel such as in the tcp/ip layer or in the ethernet driver itself. i'm sorry if its n

Re: cron limit

2005-03-14 Thread Pieter de Boer
The script thats being ran by cron does a 'ps x |grep test.pl'. and prases the output from test.pl, but since cron is limiting the char length, its not parsing the output right. ps -xw ? -- Pieter ___ freebsd-hackers@freebsd.org mailing list http://list