Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.advocacy > #372888

Re: Marek Novotny Verification

Newsgroups comp.os.linux.advocacy
From Marek Novotny <marek.novotny@marspolar.com>
Subject Re: Marek Novotny Verification
References (5 earlier) <ns9p4k$ksg$3@dont-email.me> <nsb49j$7us$2@dont-email.me> <nsbota$om2$1@dont-email.me> <09adnUmejbzH6XTKnZ2dnUU7-I3NnZ2d@giganews.com> <nsbvp2$jf3$1@dont-email.me>
Organization The Linux Foundation
Date 2016-09-26 20:48 +0000
Message-ID <N4idnfV3QdcPFHTKnZ2dnUU7-R2dnZ2d@giganews.com> (permalink)

Show all headers | View raw

On 2016-09-26, Peter Köhlmann <peter-koehlmann@t-online.de> wrote:
> Marek Novotny wrote:
>
>> On 2016-09-26, GreyCloud <Cumulus@mist.com> wrote:
>> 
>> // snip
>> 
>>> I know.  As Marek so aptly put it:  Linux may not be for you.
>>> At least I'm trying and found that OpenSuse comes the closest to windows
>>> without the Orwellian side effects.  Cortana, for example, needs to
>>> store your interactions profile on MS server so that it can better serve
>>> you,... but that can also lead to possible other privacy problems.
>>> Also, their EULA pretty much says that their corporate partners may look
>>> into your computer to see how best to market to you (advertise that is).
>>>
>>> So far so good.
>>>
>>> Anyway, shouldn't a router box be able to stop MS and their partners
>>> from snooping, or has MS figured out a way to get around that?
>> 
>> Ah, come on... :) I'm expecting more from a Solaris guy...
>> 
>> If I'm on your machine already, meaning I have code running in your
>> machine, regardless of the OS... Can't I just open an external site via
>> port 80? You use a browser don't ya?
>> 
>> So once I have done that, that million dollar firewall you have is
>> worthless. The firewall stops the outside from initiating a conversation
>> on the inside, correct? But you're on the inside. And you start up a
>> conversation with the outside all the time. See what I mean?
>
> So far, thats right. *Any* firewall is completely useless if the connection 
> is legit. Connecting to Apache from the outside is such a case. Thats one of 
> the reasons the windows firewall is rarely able to prevent an attack
>
>> So how hard is it for me to say write added code into a script that
>> performs a reverse ssh into my box giving me access to you? If you're
>> running my script, aren't you opening the pipe to me? So you're making
>> an outside call. Does your current firewall prevent such a call?
>> 
>
> The firewall would have a hard time preventing that except it will inspect 
> the IP packets. Lots of over head and generally not wanted because of that.
>
> When a connection to port 80 / Apache is already established it is up to the 
> config of Apache to prevent such things
>
> For example: The *vast* majority of linux servers being hacked is via 
> legitimate connections with a service being vulnerable (i.e. old Apache).
> The linux OS itself is extremely hard to hack into, but applications, 
> especially such big ones like Apache (or PHP, run by Apache) might contain a 
> problem where you can elevate rights

Privilege escalation. 

-- 
Marek Novotny
https://github.com/marek-novotny

Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-24 18:23 -0700
  Re: Marek Novotny Verification Melzzzzz <Melzzzzz@zzzzz.com> - 2016-09-25 01:24 +0000
    Re: Marek Novotny Verification Marek Novotny <mareknovotry@gmail.com> - 2016-09-24 18:30 -0700
      Re: Marek Novotny Verification Steve Carroll <frelwizzen@gmail.com> - 2016-09-24 18:36 -0700
    Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-24 18:48 -0700
      Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-25 10:18 -0400
  Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-24 19:56 -0600
    Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-24 21:55 -0700
      Re: Marek Novotny Verification "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 05:52 +0000
        Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-24 23:32 -0700
          Re: Marek Novotny Verification "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 06:53 +0000
            Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 00:21 -0700
      Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-25 10:21 -0400
        Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-25 12:16 -0600
      Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 07:55 -0700
        Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 15:52 +0000
          Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 08:59 -0700
            Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 16:20 +0000
              Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 09:27 -0700
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 16:42 +0000
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 17:39 +0000
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 13:16 -0700
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 14:56 -0700
        Re: Marek Novotny Verification "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 16:43 +0000
          Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 09:55 -0700
            Re: Marek Novotny Verification "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 17:03 +0000
              Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 10:10 -0700
                Re: Marek Novotny Verification "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 17:18 +0000
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 13:13 -0700
                Re: Marek Novotny Verification "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 20:38 +0000
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-25 13:50 -0700
                Re: Marek Novotny Verification "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 21:46 +0000
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 14:52 -0700
      Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-25 12:15 -0600
        Re: Marek Novotny Verification Silver Slimer <a.m@unseen.is.nospam> - 2016-09-25 18:56 +0000
          Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-25 18:12 -0600
            Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-26 08:28 -0400
              Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-26 12:20 -0600
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 19:17 +0000
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-26 13:50 -0600
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 20:22 +0000
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-26 18:20 -0600
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-27 02:45 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-27 08:53 -0400
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-27 14:19 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-27 10:35 -0400
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-27 14:44 +0000
                Re: Marek Novotny Verification chrisv <chrisv@nospam.invalid> - 2016-09-27 10:01 -0500
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-27 08:45 -0700
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-27 11:59 -0600
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-26 13:50 -0600
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 20:44 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-26 16:57 -0400
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 22:08 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-26 18:37 -0400
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-27 02:22 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-27 08:50 -0400
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-27 13:47 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-27 09:55 -0400
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-27 14:26 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-27 10:39 -0400
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-27 12:04 -0600
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-27 08:44 -0700
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-26 13:04 -0700
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-26 14:25 -0700
                Re: Marek Novotny Verification Sandman <mr@sandman.net> - 2016-09-27 05:45 +0000
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-27 08:32 -0700
                Re: Marek Novotny Verification Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-27 18:24 +0200
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-27 10:17 -0700
                Re: Marek Novotny Verification Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-27 20:03 +0200
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-27 11:04 -0700
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-27 19:44 -0400
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-28 00:49 +0000
                Re: Marek Novotny Verification chrisv <chrisv@nospam.invalid> - 2016-09-28 07:08 -0500
                Re: Marek Novotny Verification Jim Polaski <jpolaski@linuxmail.org> - 2016-09-28 14:24 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 11:53 -0400
                Re: Marek Novotny Verification Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-28 17:56 +0200
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 12:25 -0400
                Re: Marek Novotny Verification Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-28 18:27 +0200
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 12:30 -0400
                Re: Marek Novotny Verification Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-28 20:37 +0200
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 15:26 -0400
                Re: Marek Novotny Verification chrisv <chrisv@nospam.invalid> - 2016-09-28 11:54 -0500
                Re: Marek Novotny Verification chrisv <chrisv@nospam.invalid> - 2016-09-28 12:02 -0500
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-28 10:08 -0700
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-28 13:57 -0600
                Re: Marek Novotny Verification Jim Polaski <jpolaski@linuxmail.org> - 2016-09-28 15:58 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 12:26 -0400
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-28 09:00 -0700
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 12:26 -0400
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-28 10:04 -0700
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-28 11:09 -0600
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 14:55 -0400
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-28 11:09 -0600
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 15:16 -0400
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-28 13:58 -0600
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 16:02 -0400
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-28 13:16 -0700
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-29 10:16 -0600
                Re: Marek Novotny Verification Steve Carroll <fretwizzer@gmail.com> - 2016-09-29 09:24 -0700
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-29 21:38 -0600
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-29 20:56 -0700
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-30 14:34 -0600
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-30 18:11 -0600
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-29 09:37 -0700
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 07:59 -0400
                Re: Marek Novotny Verification Jim Polaski <jpolaski@linuxmail.org> - 2016-09-28 13:39 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-28 10:23 -0400
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-28 08:35 -0700
                Re: Marek Novotny Verification Snit <usenet@gallopinginsanity.com> - 2016-09-28 08:46 -0700
                Snit digest 315 / 2016-09-27 Sandman <mr@sandman.net> - 2016-09-27 20:28 +0000
                Re: Snit digest 315 / 2016-09-27 Snit <usenet@gallopinginsanity.com> - 2016-09-27 13:34 -0700
                Re: Marek Novotny Verification Peter Köhlmann <peter-koehlmann@t-online.de> - 2016-09-26 22:17 +0200
                Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 20:48 +0000
                Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-26 16:50 -0400
                Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-26 18:26 -0600
    Re: Marek Novotny Verification Silver Slimer <.m@nsn.s> - 2016-09-25 10:19 -0400
      Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-25 12:21 -0600
        Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-25 18:29 +0000
          Re: Marek Novotny Verification "Octavian W. Lagrange" <olagrang@perch.invalid> - 2016-09-25 18:48 +0000
          Re: Marek Novotny Verification GreyCloud <Cumulus@mist.com> - 2016-09-25 18:13 -0600
            Re: Marek Novotny Verification Marek Novotny <marek.novotny@marspolar.com> - 2016-09-26 00:24 +0000
  Re: Marek Novotny Verification ronb <ronb02NOSPAM@gmail.com> - 2016-09-25 02:20 +0000

csiph-web