Re: Capsicum project: Ideas needed

2011-07-08 Thread Pieter de Boer
On 07/08/2011 05:42 AM, Ilya Bakulin wrote: The question is: which applications should also be processed? I think that the most wanted candidates are SUID programs and/or popular network daemons. But looking at gzip example I also think about text-processing tools in general. I think tcpdump

Re: FreeBSD 6 vs 8.1

2011-03-18 Thread Pieter de Boer
On 03/18/2011 09:35 AM, Mats Lindberg wrote: So - after a while I've made some observations. My problem is actually connected to arp. My config is very static so basically I want to turn off arp requests. Somewhere in the startup scripts I did sysctl -w

Re: Security Flaw in Popular Disk Encryption Technologies

2008-02-23 Thread Pieter de Boer
Atom Smasher wrote: article below. does anyone know how this affects eli/geli? from the geli man page: detach - Detach the given providers, which means remove the devfs entry and clear the keys from memory. does that mean that geli properly wipes keys from RAM when a laptop is turned off?

Re: Security Flaw in Popular Disk Encryption Technologies

2008-02-23 Thread Pieter de Boer
Jeremy Chadwick wrote: It's interesting that you classified this as a feature (in quotes), because there's nothing modern about said feature. This issue has existed since the beginning of RAM chip engineering; I can even confirm this feature exists on old video game consoles such as the

Re: Welcome to Hell / Mysterious networking troubles on FreeBSD

2007-11-24 Thread Pieter de Boer
Remko Lodder wrote: Joel V. wrote: Hopefully the situation will be fixed soon. One final question though: are there any quick steps one can take to protect their server from DDOS attacks like these? If someone wants to flood your network connection with packets there is nothing you can do

Re: ARP Spoofing

2006-09-03 Thread Pieter de Boer
Maslan wrote: I was trying to find a solution to ARP Spoofing on my local network, i've tried to use IPSTEALTH option, but this didn't help. Is there is any solution for preventing the ARP Spoofing inside the kernel such as in the tcp/ip layer or in the ethernet driver itself. i'm sorry if its

Re: cron limit

2005-03-14 Thread Pieter de Boer
The script thats being ran by cron does a 'ps x |grep test.pl'. and prases the output from test.pl, but since cron is limiting the char length, its not parsing the output right. ps -xw ? -- Pieter ___ freebsd-hackers@freebsd.org mailing list