coldtobi's blog

Google Search

Calendar

«	August 2010	»
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30	31

Recently...

Syndicate

Policies

Configure lighttp to simulate .htaccess rules (Deny From All)

Posted by coldtobi | 19 Jun, 2010, 13:14

Unfortunatly, lighhtpd does not support ".htaccess" rules directly. So if you want to use a script targeted for Apache, you have to implement your own rules.

Luckily, the most needed rule is to forbid the serving of a whole directory, the "Deny From All" rule.

This one can be emulated within the lighttpd.con -- but you have to list every affected directory. A tedious task to find out every .htaccess contianing the rule and then adding the path to the configuration.

But this can be automated:

(More)

Linux / Debian, Tips and Tricks, Thecus N2100 | Comments (0) | Trackbacks (0)

WoW Money Laundering?

Posted by coldtobi | 19 Jun, 2010, 09:37

Today I want to share you a spam comment which was submitted some days ago. (I modified the comment and removed all external links. SPAM won't pay on this blog)

It seems that WoW has some reached some money laundery scheme, at least with "virtual money." I'm not playing the game, but it could also be that they (gold traders?) Use some victim as money mule to hide traces? Anti-Cheat detection prevention (you know, buying gold is considered cheating). I don't know, but I think it is an interesting development, and it might make sense to use caution. Especially if this is a way to launder real money, this can cause you real trouble (this could send someone to jail, worst case. IANAL! )

(More)

Netzfunde | Comments (0) | Trackbacks (0)

Samba: No mount as user.

Posted by coldtobi | 5 Apr, 2010, 22:48

For security reasons (CVE-2009-2948) samba ceases to support setuid mount.cifs. Until at least a proper fix has been generated (saw patches for them, but at least in Debian they are not or defunc (Patches: http://archives.free.net.ph/message/20100326.142523.e959e38d.en.html, details of the problem http://www.samba.org/samba/security/CVE-2009-2948.html )

(IMHO the CVE is valid, but only makes sense in an multi-user enviorment and if you want to store your passwords in some files. Both are false for me. )

However, I need a working system. The other option is waiting until upstreams deciding what's better for me -- a security problem not touching my samba usage or no service at all. (Yes, I'm a little upset by this -- hitten cold by this "improvement" and finding out that they indeed choosen a way to "fix" it by disabling the execution at all. When I read the CVE notice from samba, it could also be done to disable the offending "information leaking" command options when run setuid... Well.)

Well *taking deep breath* lets stop ranting:

(More)

General | Comments (0) | Trackbacks (0)

Nice Links #1 -- How hardrives works and how they do recovery

Posted by coldtobi | 14 Mar, 2010, 10:07

I start a new series: Nice Links: Links I came around and I want to keep / share.

Today: Harddisks low level functionality explained, some types of errors and some approach to repair. (Interesting, but don't try this at home.)

http://www.myharddrivedied.com/presentations_whitepaper.html

I came accross this site, as my laptop's hardrive showed some read erros in the log, and I wanted to know what the AMNF acrconym is all about. This was the error my drive showed.

This also reminded me to do backups ;-)

(More)

Nice Links | Comments (0) | Trackbacks (0)

Squirrelmail and lighttpd -- An Installation Guide --

Posted by coldtobi | 9 Jan, 2010, 21:57

Today I installed the squirrel on my Thecus. The horde used before -- even if powerful -- was just to slow to make fun. As friends told me that the squirrel is slick and quick -- as its name suggests. (After installation, I can confirm this)

The squirrel -- is a web interface for accessing your mail, written in PHP. It does -- by default -- needs not to have any database. It can access your mail both by IMAP and by POP3.

As my setup is not the regular "Apache" based one, it might make sense to show how it has to be configured with lighttpd as web server.

Lets start.

(More)

Linux / Debian, Tips and Tricks, Thecus N2100 | Comments (0) | Trackbacks (0)