Brontoforumus Archive

Please login or register.

Login with username, password and session length
Advanced search  

News:


This board has been fossilized.
You are reading an archive of Brontoforumus, a.k.a. The Worst Forums Ever, from 2008 to early 2014.  Registration and posting (for most members) has been disabled here to discourage spambots from taking over.  Old members can still log in to view boards, PMs, etc.

The new message board is at http://brontoforum.us.

Pages: 1 2 3 4 5 6 [7]

Author Topic: Every Day is Like Today  (Read 18832 times)

0 Members and 1 Guest are viewing this topic.

Thad

  • Master of Karate and Friendship for Everyone
  • Admin
  • Tested
  • Karma: -65394
  • Posts: 12111
    • View Profile
    • corporate-sellout.com
Re: Every Day is Like Today
« Reply #120 on: October 25, 2010, 09:18:14 PM »

What kind of accounts are we talking?  It's been ages since I worked with Red Hat, but I remember it being pretty trivial to set up FTP-only accounts.

If you're talking shell access, the most important thing is chroot, but there IS more hardening to do beyond that.
Logged

JDigital

  • Tested
  • Karma: 32
  • Posts: 2786
    • View Profile
Re: Every Day is Like Today
« Reply #121 on: October 26, 2010, 09:14:24 AM »

The way Pyoko was set up, you could read anyone else's files if you knew the path and filename. Dreamhost is set up the same way, except the user list is hidden to give the illusion of security.

Dreamhost's "secure" setting is to set your homedir's group to the apache user, and its permissions to 750. If I understand my linuxes, this allows apache read access to your homedir and its subfolders, while forbidding other users. Its PHP uses suexec and FastCGI so that PHP runs as the user, so you can't write a script to read someone else's files using apache's permissions.
Logged

Thad

  • Master of Karate and Friendship for Everyone
  • Admin
  • Tested
  • Karma: -65394
  • Posts: 12111
    • View Profile
    • corporate-sellout.com
Re: Every Day is Like Today
« Reply #122 on: October 26, 2010, 01:12:12 PM »

I think you mean "apache group", not "apache user", but other than that it makes sense.

At any rate, isn't the stuff that's actually accessible from the Web generally stored in a subdirectory (~/www, ~/public_html, etc)?  Sticking an entire homedir on the Web does seem like a pretty terrible idea.



PS I had to click on your name to figure out who the hell you are.  Never been a fan of that.
Logged

Classic

  • Happens more often than you'd think.
  • Tested
  • Karma: -58471
  • Posts: 7501
    • View Profile
Re: Every Day is Like Today
« Reply #123 on: October 26, 2010, 01:29:15 PM »

Psst:
It's JDigital.

...
...
He had to tell me directly.
Logged

Mongrel

  • Emoticon Knight-Errant
  • kodePunc Team
  • Tested
  • *
  • Karma: -65340
  • Posts: 17029
    • View Profile
Re: Every Day is Like Today
« Reply #124 on: October 26, 2010, 02:49:10 PM »

I was wondering who the hell that was.
Logged

JDigital

  • Tested
  • Karma: 32
  • Posts: 2786
    • View Profile
Re: Every Day is Like Today
« Reply #125 on: October 26, 2010, 05:44:11 PM »

At any rate, isn't the stuff that's actually accessible from the Web generally stored in a subdirectory (~/www, ~/public_html, etc)?  Sticking an entire homedir on the Web does seem like a pretty terrible idea.

The entire homedir isn't web-accessible on Dreamhost, only a subdir. The apache user can technically access your entire homedir, but suexec means PHP doesn't run as the apache user.
Logged

Aintaer

  • My hubris!
  • Tested
  • Karma: 10
  • Posts: 384
    • View Profile
Re: Every Day is Like Today
« Reply #126 on: October 27, 2010, 09:03:50 AM »

The CMS is complete for the purposes of posting, by the way. I'm using it for managing my own thing: Colloquy

As for web hosting on brontoforum.us, it was not an option when I started writing the CMS. Nor is it still an option right now until Brentai actually allows real users with full LAMP stack ready.
Logged

Mothra

  • ┐('~`;)┌ w/e
  • Admin
  • Tested
  • Karma: -62198
  • Posts: 3778
    • View Profile
Re: Every Day is Like Today
« Reply #127 on: November 09, 2011, 12:07:06 PM »

DN: Draw another one of these please.
Logged

Disposable Ninja

  • Tested
  • Karma: -65447
  • Posts: 4529
    • View Profile
Re: Every Day is Like Today
« Reply #128 on: November 13, 2011, 12:55:25 PM »

Sure. In fact you even get to pick the joke! Which would you find funnier? Telling a high school girl she's so ugly that she begins to cry, or a horrifying, highly detailed drawing of somebody with terrible congenital defects?
Logged

Lottel

  • You know that's right
  • Tested
  • Karma: 81
  • Posts: 3723
    • View Profile
Re: Every Day is Like Today
« Reply #129 on: November 13, 2011, 01:20:32 PM »

BOTH
Logged

Mothra

  • ┐('~`;)┌ w/e
  • Admin
  • Tested
  • Karma: -62198
  • Posts: 3778
    • View Profile
Re: Every Day is Like Today
« Reply #130 on: November 13, 2011, 02:20:39 PM »

Sure. In fact you even get to pick the joke! Which would you find funnier? Telling a high school girl she's so ugly that she begins to cry, or a horrifying, highly detailed drawing of somebody with terrible congenital defects?

Do you perhaps have a less unfortunate unfortunate happening about which we may jest

Like maybe a large beetle got caught inside your house and you didn't know how to get it out and this caused several comedically exaggerated expressive relenting frowns
Logged

Classic

  • Happens more often than you'd think.
  • Tested
  • Karma: -58471
  • Posts: 7501
    • View Profile
Re: Every Day is Like Today
« Reply #131 on: November 13, 2011, 02:27:09 PM »

... I hope those aren't secretly the same comic.
Logged

Disposable Ninja

  • Tested
  • Karma: -65447
  • Posts: 4529
    • View Profile
Re: Every Day is Like Today
« Reply #132 on: November 14, 2011, 08:26:02 AM »

... I hope those aren't secretly the same comic.

They're making fun of the same thing, yes. I'm just trying to figure out the best punchline.

BOTH

Nah, that'd be overkill.

Do you perhaps have a less unfortunate unfortunate happening about which we may jest

I was intentionally making it sound more horrifying than it actually is. Don't worry, the second you see it you'll go "Oh." Maybe even "Oh. Ha."

Like maybe a large beetle got caught inside your house and you didn't know how to get it out and this caused several comedically exaggerated expressive relenting frowns

I started taking Prozac. I feel too damn good to make fun of myself.
Logged
Pages: 1 2 3 4 5 6 [7]