Is this how I got hacked last month?
Linux noob here. I had a file named testfile321.php in /public\_html/testfolder321/ on my server last month... it was a test file I forgot to delete. The file testfile321.php had 0755 permissions, allowing anyone to execute. Here was the code in that file:
​
`<?php`
`exec('node/bin/npm install jt-js-sample');`
​
That's all there was to it. There was only one other person who knew about the existence of testfile321.php in my public web directory, a coder I was hiring. My server suddenly got infected by phishing malware and started sending out thousands of phishing emails, and people were replying to my server's email address saying I was sending them phishing emails.
I've since restored my server to a clean image before that file ever existed, and changed all the passwords to everything, including the root password.
Now my question is this: was it possible for him to execute commands and gain remote access through testfile321.php, seeing as how it had 0755 permissions? Did the existence of that file allow him to inject his own commands and gain root access? Can someone ELI5 what commands someone would've injected through that file to gain root access and/or install malware?
https://redd.it/fbccst
@r_linux
Linux noob here. I had a file named testfile321.php in /public\_html/testfolder321/ on my server last month... it was a test file I forgot to delete. The file testfile321.php had 0755 permissions, allowing anyone to execute. Here was the code in that file:
​
`<?php`
`exec('node/bin/npm install jt-js-sample');`
​
That's all there was to it. There was only one other person who knew about the existence of testfile321.php in my public web directory, a coder I was hiring. My server suddenly got infected by phishing malware and started sending out thousands of phishing emails, and people were replying to my server's email address saying I was sending them phishing emails.
I've since restored my server to a clean image before that file ever existed, and changed all the passwords to everything, including the root password.
Now my question is this: was it possible for him to execute commands and gain remote access through testfile321.php, seeing as how it had 0755 permissions? Did the existence of that file allow him to inject his own commands and gain root access? Can someone ELI5 what commands someone would've injected through that file to gain root access and/or install malware?
https://redd.it/fbccst
@r_linux
reddit
Is this how I got hacked last month?
Linux noob here. I had a file named testfile321.php in /public\_html/testfolder321/ on my server last month... it was a test file I forgot to...
Looking for a graphics tablet for Fedora or OpenSuse
Hi, I am looking for a non-Wacom graphics tablet that would work on Gnome Wayland (Fedora) and/or KDE plasma(OpenSuse). I have spent hours researching and while some models by some manufacturers (eg XP-Pen and Huion) seem to work with Linux systems, there is conflicting information from users - for some it works, for others not.
Would it be wise to choose a model that has Android support, as it might have better chances of working on Linux?
Thanks.
https://redd.it/fbc8nx
@r_linux
Hi, I am looking for a non-Wacom graphics tablet that would work on Gnome Wayland (Fedora) and/or KDE plasma(OpenSuse). I have spent hours researching and while some models by some manufacturers (eg XP-Pen and Huion) seem to work with Linux systems, there is conflicting information from users - for some it works, for others not.
Would it be wise to choose a model that has Android support, as it might have better chances of working on Linux?
Thanks.
https://redd.it/fbc8nx
@r_linux
reddit
Looking for a graphics tablet for Fedora or OpenSuse
Hi, I am looking for a non-Wacom graphics tablet that would work on Gnome Wayland (Fedora) and/or KDE plasma(OpenSuse). I have spent hours...
Srain - Modern IRC Client written in GTK
https://srain.im/2020/02/29/introducing-srain.html
https://redd.it/fbd4og
@r_linux
https://srain.im/2020/02/29/introducing-srain.html
https://redd.it/fbd4og
@r_linux
I wrote a bash noscript to select a country using dmenu and open the respective YouTube trending page
https://www.youtube.com/feed/trending shows trending for your currently selected country. To view it for another country, you need to either change it manually in the menu or append a country code, such as ?gl=DE. This becomes tedious if you want to switch to multiple countries.
With this noscript you can select the country using `dmenu` and the respective trending page will open. Change the browser in the last line to your own browser.
How to use: just run the noscript with no arguments. You need to have `dmenu` installed.
#!/bin/bash
declare -A countries=(
["Algeria"]="dz"
["Argentina"]="ar"
["Australia"]="au"
["Austria"]="at"
["Azerbaijan"]="az"
["Bahrain"]="bh"
["Belarus"]="by"
["Belgium"]="be"
["Bolivia"]="bo"
["Bosnia and Herzegovina"]="ba"
["Brazil"]="br"
["Bulgaria"]="bg"
["Canada"]="ca"
["Chile"]="cl"
["Colombia"]="co"
["Costa Rica"]="cr"
["Croatia"]="hr"
["Cyprus"]="cy"
["Czechia"]="cz"
["Denmark"]="dk"
["Dominican Republic"]="do"
["Ecuador"]="ec"
["Egypt"]="eg"
["El Salvador"]="sv"
["Estonia"]="ee"
["Finland"]="fi"
["France"]="fr"
["Georgia"]="ge"
["Germany"]="de"
["Ghana"]="gh"
["Greece"]="gr"
["Guatemala"]="gt"
["Honduras"]="hn"
["Hong Kong"]="hk"
["Hungary"]="hu"
["Iceland"]="is"
["India"]="in"
["Indonesia"]="id"
["Iraq"]="iq"
["Ireland"]="ie"
["Israel"]="il"
["Italy"]="it"
["Jamaica"]="jm"
["Japan"]="jp"
["Jordan"]="jo"
["Kazakhstan"]="kz"
["Kenya"]="ke"
["Kuwait"]="kw"
["Latvia"]="lv"
["Lebanon"]="lb"
["Libya"]="ly"
["Liechtenstein"]="li"
["Lithuania"]="lt"
["Luxembourg"]="lu"
["Malaysia"]="my"
["Malta"]="mt"
["Mexico"]="mx"
["Montenegro"]="me"
["Morocco"]="ma"
["Nepal"]="np"
["Netherlands"]="nl"
["New Zealand"]="nz"
["Nicaragua"]="ni"
["Nigeria"]="ng"
["North Macedonia"]="mk"
["Norway"]="no"
["Oman"]="om"
["Pakistan"]="pk"
["Panama"]="pa"
["Papua New Guinea"]="pg"
["Paraguay"]="py"
["Peru"]="pe"
["Philippines"]="ph"
["Poland"]="pl"
["Portugal"]="pt"
["Puerto Rico"]="pr"
["Qatar"]="qa"
["Romania"]="ro"
["Russia"]="ru"
["Saudi Arabia"]="sa"
["Senegal"]="sn"
["Serbia"]="cs"
["Singapore"]="sg"
["Slovakia"]="sk"
["Slovenia"]="si"
["South Africa"]="za"
["South Korea"]="kr"
["Spain"]="es"
["Sri Lanka"]="lk"
["Sweden"]="se"
["Switzerland"]="ch"
["Taiwan"]="tw"
["Tanzania"]="tz"
["Thailand"]="th"
["Tunisia"]="tn"
["Turkey"]="tr"
["Uganda"]="ug"
["Ukraine"]="ua"
["United Arab Emirates"]="ae"
["United Kingdom"]="gb"
["United States"]="us"
["Uruguay"]="uy"
["Venezuela"]="ve"
["Vietnam"]="vn"
["Yemen"]="ye"
["Zimbabwe"]="zw"
)
choice=$(printf "%s\n" "${!countries[@]}" | dmenu -i)
brave-browser "https://www.youtube.com/feed/trending?gl=${countries[$choice]^^}"
https://redd.it/fbf41p
@r_linux
https://www.youtube.com/feed/trending shows trending for your currently selected country. To view it for another country, you need to either change it manually in the menu or append a country code, such as ?gl=DE. This becomes tedious if you want to switch to multiple countries.
With this noscript you can select the country using `dmenu` and the respective trending page will open. Change the browser in the last line to your own browser.
How to use: just run the noscript with no arguments. You need to have `dmenu` installed.
#!/bin/bash
declare -A countries=(
["Algeria"]="dz"
["Argentina"]="ar"
["Australia"]="au"
["Austria"]="at"
["Azerbaijan"]="az"
["Bahrain"]="bh"
["Belarus"]="by"
["Belgium"]="be"
["Bolivia"]="bo"
["Bosnia and Herzegovina"]="ba"
["Brazil"]="br"
["Bulgaria"]="bg"
["Canada"]="ca"
["Chile"]="cl"
["Colombia"]="co"
["Costa Rica"]="cr"
["Croatia"]="hr"
["Cyprus"]="cy"
["Czechia"]="cz"
["Denmark"]="dk"
["Dominican Republic"]="do"
["Ecuador"]="ec"
["Egypt"]="eg"
["El Salvador"]="sv"
["Estonia"]="ee"
["Finland"]="fi"
["France"]="fr"
["Georgia"]="ge"
["Germany"]="de"
["Ghana"]="gh"
["Greece"]="gr"
["Guatemala"]="gt"
["Honduras"]="hn"
["Hong Kong"]="hk"
["Hungary"]="hu"
["Iceland"]="is"
["India"]="in"
["Indonesia"]="id"
["Iraq"]="iq"
["Ireland"]="ie"
["Israel"]="il"
["Italy"]="it"
["Jamaica"]="jm"
["Japan"]="jp"
["Jordan"]="jo"
["Kazakhstan"]="kz"
["Kenya"]="ke"
["Kuwait"]="kw"
["Latvia"]="lv"
["Lebanon"]="lb"
["Libya"]="ly"
["Liechtenstein"]="li"
["Lithuania"]="lt"
["Luxembourg"]="lu"
["Malaysia"]="my"
["Malta"]="mt"
["Mexico"]="mx"
["Montenegro"]="me"
["Morocco"]="ma"
["Nepal"]="np"
["Netherlands"]="nl"
["New Zealand"]="nz"
["Nicaragua"]="ni"
["Nigeria"]="ng"
["North Macedonia"]="mk"
["Norway"]="no"
["Oman"]="om"
["Pakistan"]="pk"
["Panama"]="pa"
["Papua New Guinea"]="pg"
["Paraguay"]="py"
["Peru"]="pe"
["Philippines"]="ph"
["Poland"]="pl"
["Portugal"]="pt"
["Puerto Rico"]="pr"
["Qatar"]="qa"
["Romania"]="ro"
["Russia"]="ru"
["Saudi Arabia"]="sa"
["Senegal"]="sn"
["Serbia"]="cs"
["Singapore"]="sg"
["Slovakia"]="sk"
["Slovenia"]="si"
["South Africa"]="za"
["South Korea"]="kr"
["Spain"]="es"
["Sri Lanka"]="lk"
["Sweden"]="se"
["Switzerland"]="ch"
["Taiwan"]="tw"
["Tanzania"]="tz"
["Thailand"]="th"
["Tunisia"]="tn"
["Turkey"]="tr"
["Uganda"]="ug"
["Ukraine"]="ua"
["United Arab Emirates"]="ae"
["United Kingdom"]="gb"
["United States"]="us"
["Uruguay"]="uy"
["Venezuela"]="ve"
["Vietnam"]="vn"
["Yemen"]="ye"
["Zimbabwe"]="zw"
)
choice=$(printf "%s\n" "${!countries[@]}" | dmenu -i)
brave-browser "https://www.youtube.com/feed/trending?gl=${countries[$choice]^^}"
https://redd.it/fbf41p
@r_linux
Youtube
- YouTube
Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.
Gamma Text Editor - overview (Beta)
[https://www.youtube.com/watch?v=G8B3HF2mzak](https://www.youtube.com/watch?v=G8B3HF2mzak)
Gamma (Γ) is a lightweight text editor. It is meant to be an alternative to Gedit or Notepad++. Although the current implementation is tested on linux under Gnome desktop environment, Gamma can run on Linux, Windows, and Mac if dependencies are installed (see Dependencies section below). Gamma uses GTK3 (cross-platform GUI toolkit) and PyGObject which is a Python package that provides bindings for GObject based libraries such as GTK, GStreamer, WebKitGTK, GLib, GIO and many more.
​
Your thoughts please
https://redd.it/fbga95
@r_linux
[https://www.youtube.com/watch?v=G8B3HF2mzak](https://www.youtube.com/watch?v=G8B3HF2mzak)
Gamma (Γ) is a lightweight text editor. It is meant to be an alternative to Gedit or Notepad++. Although the current implementation is tested on linux under Gnome desktop environment, Gamma can run on Linux, Windows, and Mac if dependencies are installed (see Dependencies section below). Gamma uses GTK3 (cross-platform GUI toolkit) and PyGObject which is a Python package that provides bindings for GObject based libraries such as GTK, GStreamer, WebKitGTK, GLib, GIO and many more.
​
Your thoughts please
https://redd.it/fbga95
@r_linux
YouTube
Gamma Text Editor - overview (Beta)
Gamma (Γ) is a lightweight text editor. It is meant to be an alternative to Gedit or Notepad++. Although the current implementation is tested on linux under ...
This month in KDE Web: KDE Connect gets a new website, we updated the sites for KMyMoney, Juk, KDE e.V. and KDE China, and a lot more.
https://carlschwan.eu/2020/02/29/this-month-in-kde-web-february-2020.html
https://redd.it/fbhwsm
@r_linux
https://carlschwan.eu/2020/02/29/this-month-in-kde-web-february-2020.html
https://redd.it/fbhwsm
@r_linux
Carl Schwan Website
This month in KDE Web: January-February 2020
This is the first post in a monthly series about improvements to the KDE websites. I plan to publish it every last Saturday of the month. Since a lot happened in January and I didn’t mention it anywhere, I will also mention those things in this post.
Don't Know What Else to Do
I am having issues installing grub onto my laptop. I have to do this again since a windows update deleted linux from my UEFI BIOS version boot menu. Whenever I am trying to install it onto my system(currently using pop!\_os from my USB because I can't load onto pop!\_os on my laptop. I would love to just install this on my laptop and wipe everything, but I have some files on my the original Pop!\_os that I would like to keep.
Is there a way to access the files without booting up the OS?
This is the error that I receive when trying to install grub:
"pop-os@pop-os:\~$ sudo apt install grub2-common
Reading package lists... Done
Building dependency tree
Reading state information... Done
grub2-common is already the newest version (2.02-2ubuntu8.13).
0 upgraded, 0 newly installed, 0 to remove and 3 not upgraded.
1 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? \[Y/n\] y
Setting up refind (0.11.5-1) ...
ShimSource is none
Installing rEFInd on Linux....
The ESP doesn't seem to be mounted! Trying to find it....
mount: /boot/efi: special device /dev/nvme0n11 does not exist.
umount: /boot/efi: not mounted.
///boot/efi doesn't seem to be on a VFAT filesystem. The ESP must be
mounted at //boot or //boot/efi and it must be VFAT (not msdos)!
Aborting!
dpkg: error processing package refind (--configure):
installed refind package post-installation noscript subprocess returned error exit status 1
Errors were encountered while processing:
refind
E: Sub-process /usr/bin/dpkg returned an error code (1)"
Any help would be appreciated! Thank you in advance.
https://redd.it/fbhtpk
@r_linux
I am having issues installing grub onto my laptop. I have to do this again since a windows update deleted linux from my UEFI BIOS version boot menu. Whenever I am trying to install it onto my system(currently using pop!\_os from my USB because I can't load onto pop!\_os on my laptop. I would love to just install this on my laptop and wipe everything, but I have some files on my the original Pop!\_os that I would like to keep.
Is there a way to access the files without booting up the OS?
This is the error that I receive when trying to install grub:
"pop-os@pop-os:\~$ sudo apt install grub2-common
Reading package lists... Done
Building dependency tree
Reading state information... Done
grub2-common is already the newest version (2.02-2ubuntu8.13).
0 upgraded, 0 newly installed, 0 to remove and 3 not upgraded.
1 not fully installed or removed.
After this operation, 0 B of additional disk space will be used.
Do you want to continue? \[Y/n\] y
Setting up refind (0.11.5-1) ...
ShimSource is none
Installing rEFInd on Linux....
The ESP doesn't seem to be mounted! Trying to find it....
mount: /boot/efi: special device /dev/nvme0n11 does not exist.
umount: /boot/efi: not mounted.
///boot/efi doesn't seem to be on a VFAT filesystem. The ESP must be
mounted at //boot or //boot/efi and it must be VFAT (not msdos)!
Aborting!
dpkg: error processing package refind (--configure):
installed refind package post-installation noscript subprocess returned error exit status 1
Errors were encountered while processing:
refind
E: Sub-process /usr/bin/dpkg returned an error code (1)"
Any help would be appreciated! Thank you in advance.
https://redd.it/fbhtpk
@r_linux
reddit
Don't Know What Else to Do
I am having issues installing grub onto my laptop. I have to do this again since a windows update deleted linux from my UEFI BIOS version boot...
installing from one partition to another without usb?
i just bricked my remaining usb large enough to hold an iso file. i was planning on installing a distro to run on my laptop. i had an idea and i would like to know if it'll work...
since i went and bought a new drive for the installation, can i just create a partition just big enough for the iso file and install to the partitions on the rest of the disk?
https://redd.it/fbjvet
@r_linux
i just bricked my remaining usb large enough to hold an iso file. i was planning on installing a distro to run on my laptop. i had an idea and i would like to know if it'll work...
since i went and bought a new drive for the installation, can i just create a partition just big enough for the iso file and install to the partitions on the rest of the disk?
https://redd.it/fbjvet
@r_linux
reddit
installing from one partition to another without usb?
i just bricked my remaining usb large enough to hold an iso file. i was planning on installing a distro to run on my laptop. i had an idea and i...
Any good contact management apps?
As the noscript would indicate, I am looking for a good contact management app. It doesn't have to be quite up to level of a full CRM, although that would be nice. I keep my contacts in a number of differrent places (google, linkedin, nextcloud, etc) and would like one central place to work with them. Integration with email and text would be nice as well.
I've run a SuiteCRM instance and found its google and android integration troublesome. I've also tried Kaddress and it never did sync the contacts correctly for me.
Running Mint (Peppermint actually). Any suggestions would be appreciated.
https://redd.it/fbksv6
@r_linux
As the noscript would indicate, I am looking for a good contact management app. It doesn't have to be quite up to level of a full CRM, although that would be nice. I keep my contacts in a number of differrent places (google, linkedin, nextcloud, etc) and would like one central place to work with them. Integration with email and text would be nice as well.
I've run a SuiteCRM instance and found its google and android integration troublesome. I've also tried Kaddress and it never did sync the contacts correctly for me.
Running Mint (Peppermint actually). Any suggestions would be appreciated.
https://redd.it/fbksv6
@r_linux
reddit
Any good contact management apps?
As the noscript would indicate, I am looking for a good contact management app. It doesn't have to be quite up to level of a full CRM, although that...
Full year graphical calendar on Linux
Hi,
I'm looking for a desktop app on Linux that can show a calendar similar to https://www.timeanddate.com/calendar/
I'd like to see public holidays for my country shown as well.
"cal" does something similar on a terminal, but I prefer something graphical.
Most calendar apps I tried just show 1 month at a time. That's not what I'm looking for...
Thanks
--Coder
https://redd.it/fblc50
@r_linux
Hi,
I'm looking for a desktop app on Linux that can show a calendar similar to https://www.timeanddate.com/calendar/
I'd like to see public holidays for my country shown as well.
"cal" does something similar on a terminal, but I prefer something graphical.
Most calendar apps I tried just show 1 month at a time. That's not what I'm looking for...
Thanks
--Coder
https://redd.it/fblc50
@r_linux
Timeanddate
Calendar 2026
Calendars – online and print friendly – for any year and month and including public holidays and observances for countries worldwide.
Wofi v1.1 Release - a launcher/menu program for wlroots based wayland compositors
https://hg.sr.ht/~scoopta/wofi
https://redd.it/fbka9l
@r_linux
https://hg.sr.ht/~scoopta/wofi
https://redd.it/fbka9l
@r_linux
reddit
Wofi v1.1 Release - a launcher/menu program for wlroots based...
Posted in r/linux by u/HolyCloudNinja • 5 points and 0 comments
Linux: gnome-keyring setup as Freedesktop SecretService
https://medium.com//linux-gnome-keyring-setup-as-freedesktop-secretservice-99521a20e9c4?source=friends_link&sk=a2b9521d6e7070dcdf505612858109b4
https://redd.it/fbmtp1
@r_linux
https://medium.com//linux-gnome-keyring-setup-as-freedesktop-secretservice-99521a20e9c4?source=friends_link&sk=a2b9521d6e7070dcdf505612858109b4
https://redd.it/fbmtp1
@r_linux
Medium
Linux: gnome-keyring setup as Freedesktop SecretService
Currently, I’m using KeePass as passwords, RSA-keys, and as the Freedesktop SecretService, see the KeePass: an MFA TOTP codes, a browser’s…
Corsair K55 keyboard prints root password in plain text when pressing CTRL+G5 keys.
`\]]]*/***
ROOTPASSWORD
sudo dnf update
PARTIAL\]]]*/***`
The * are for privacy sake, no idea if they mean anything important
I have switched from openSUSE to Fedora and am now on Windows, un-plugged and re-plugged keyboard and it still has this in its memory.
keyboard in question: https://images-na.ssl-images-amazon.com/images/I/71wSG1VzANL._AC_SL1500_.jpg
https://redd.it/fbnz8q
@r_linux
`\]]]*/***
ROOTPASSWORD
sudo dnf update
PARTIAL\]]]*/***`
The * are for privacy sake, no idea if they mean anything important
I have switched from openSUSE to Fedora and am now on Windows, un-plugged and re-plugged keyboard and it still has this in its memory.
keyboard in question: https://images-na.ssl-images-amazon.com/images/I/71wSG1VzANL._AC_SL1500_.jpg
https://redd.it/fbnz8q
@r_linux
A browser based application that requires no system related support checks the OS for requirements? Sounds legit.
https://redd.it/fborrx
@r_linux
https://redd.it/fborrx
@r_linux
Free tickets to SCALE 18x (Southern California Linux Expo)
Hi r/linux,
We got our hands on some extra tickets to the annual [SCALE (Southern California Linux Expo) 18x](https://www.socallinuxexpo.org/scale/18x) conference and wanted to share! Enter our giveaway by signing up for our waitlist [via this link](https://freepn.com/?pk_campaign=community&pk_kwd=reddit-giveaway-linux). We will select three winners so make sure to **sign up by 12pm PST on March 2**! Good luck!
We'll also be at the conference at the FreePN booth, #413 - come say hello and learn more about what we're building! FreePN is a Linux first, free, fast, anonymous, open-source, peer-to-peer VPN. You can read more about us [here](https://freepn.com/?pk_campaign=community&pk_kwd=reddit-giveaway-linux).
Happy to answer any questions about the giveaway/FreePN.
https://redd.it/fbp6wl
@r_linux
Hi r/linux,
We got our hands on some extra tickets to the annual [SCALE (Southern California Linux Expo) 18x](https://www.socallinuxexpo.org/scale/18x) conference and wanted to share! Enter our giveaway by signing up for our waitlist [via this link](https://freepn.com/?pk_campaign=community&pk_kwd=reddit-giveaway-linux). We will select three winners so make sure to **sign up by 12pm PST on March 2**! Good luck!
We'll also be at the conference at the FreePN booth, #413 - come say hello and learn more about what we're building! FreePN is a Linux first, free, fast, anonymous, open-source, peer-to-peer VPN. You can read more about us [here](https://freepn.com/?pk_campaign=community&pk_kwd=reddit-giveaway-linux).
Happy to answer any questions about the giveaway/FreePN.
https://redd.it/fbp6wl
@r_linux
reddit
Free tickets to SCALE 18x (Southern California Linux Expo)
Hi r/linux, We got our hands on some extra tickets to the annual [SCALE (Southern California Linux Expo)...
Notes taking workflow and programs
How do you guys manage your notes?
I am specifically interested in programs and workflows.
I am already aware of Joplin and orgmode + organice and I am trying to decide between these two.
But, maybe there are options or workflows better suited for my needs.
I need to be able to manage my notes from desktop and mobile. CLI mode for desktop is a must. Searching, tagging and reading notes should be fast and easy.
I am a vim user and would like to be able to use vim as the note taking editor.
Adding pictures to the notes would be a plus but it is not a must. Same holds for tagging.
https://redd.it/fbnhz9
@r_linux
How do you guys manage your notes?
I am specifically interested in programs and workflows.
I am already aware of Joplin and orgmode + organice and I am trying to decide between these two.
But, maybe there are options or workflows better suited for my needs.
I need to be able to manage my notes from desktop and mobile. CLI mode for desktop is a must. Searching, tagging and reading notes should be fast and easy.
I am a vim user and would like to be able to use vim as the note taking editor.
Adding pictures to the notes would be a plus but it is not a must. Same holds for tagging.
https://redd.it/fbnhz9
@r_linux
reddit
Notes taking workflow and programs
How do you guys manage your notes? I am specifically interested in programs and workflows. I am already aware of Joplin and orgmode + organice...
Ways to eliminate vulnerabilities in your repository
https://medium.com/@AntonLawrence/vulnerabilities-in-your-repository-bb5b11221a6a
https://redd.it/fbqkzw
@r_linux
https://medium.com/@AntonLawrence/vulnerabilities-in-your-repository-bb5b11221a6a
https://redd.it/fbqkzw
@r_linux
Medium
Easy Ways to Eliminate Vulnerabilities in your Repository
There’s a rise of vulnerability tools lately and since I’ve never fiddled around with it I was wondering what’s up with it. Now seems like…
Sandboxing in Linux is completely broken
I read [flatkill.org](https://flatkill.org) and there is something that I found interesting since I am looking into securing apps with Apparmor.
>Almost all popular applications on flathub come with filesystem=host, filesystem=home or device=all permissions, that is, write permissions to the user home directory (and more), this effectively means that all it takes to "escape the sandbox" is `echo download_and_execute_evil >> ~/.bashrc`. That's it.
Since apps store configuration in hidden files in the home folder, and they store those files everywhere, it is very hard to sandbox apps so that they don't try to do anything funny with hidden files in the home folder. I tried sandboxing Atril with Apparmor and it tries to load a lot of hidden files of unrelated apps. How it is possible to sandbox apps if they touch each other's configuration files?
https://redd.it/fbk8wo
@r_linux
I read [flatkill.org](https://flatkill.org) and there is something that I found interesting since I am looking into securing apps with Apparmor.
>Almost all popular applications on flathub come with filesystem=host, filesystem=home or device=all permissions, that is, write permissions to the user home directory (and more), this effectively means that all it takes to "escape the sandbox" is `echo download_and_execute_evil >> ~/.bashrc`. That's it.
Since apps store configuration in hidden files in the home folder, and they store those files everywhere, it is very hard to sandbox apps so that they don't try to do anything funny with hidden files in the home folder. I tried sandboxing Atril with Apparmor and it tries to load a lot of hidden files of unrelated apps. How it is possible to sandbox apps if they touch each other's configuration files?
https://redd.it/fbk8wo
@r_linux
reddit
Sandboxing in Linux is completely broken
I read [flatkill.org](https://flatkill.org) and there is something that I found interesting since I am looking into securing apps with...
cron.weekly issue #123: eBPF, Licensing, CentOS, usql, CouchDB & more
https://ma.ttias.be/cronweekly/issue-123/
https://redd.it/fbrx4f
@r_linux
https://ma.ttias.be/cronweekly/issue-123/
https://redd.it/fbrx4f
@r_linux
ma.ttias.be
cron.weekly issue #123: eBPF, Licensing, CentOS, usql, CouchDB & more
Hi everyone! 👋
Welcome to cron.weekly issue #123.
There’s an interesting guide on eBPF filters in this issue, a good variety of news (not just restricted to Linux, pretty all-round) and a lot of new tools I found interesting out there.
Welcome to cron.weekly issue #123.
There’s an interesting guide on eBPF filters in this issue, a good variety of news (not just restricted to Linux, pretty all-round) and a lot of new tools I found interesting out there.