Archive for April, 2006

Avoiding /tmp directory exploits (2006-4-27)

On a Linux webserver, it's a good idea to recrate the /tmp directory on its own partition with noexec and nosuid.  This will ensure that a malicious user can't stuff a rootkit into /tmp through your web server (usually via PHP) and get control of your machine. Dynamic Net has published a great document for [...]

What's With the Huge Emails? (2006-4-18)

Over the past few months, the number of our clients who create real issues by sending ENORMOUS emails has been steadily increasing, and Outlook is apparently competely inept at dealing with the error message that a too-big email generates. Here’s the scenario:  Becky at Company A is a zConnect client.  She sends (and receives) her [...]

Buy My Kids Peanuts (2006-4-7)

We went to the Birmingham Barons’ opening day yesterday at Hoover Metropolitan Stadium, just south of Birmingham, Al.  A silly joke in the stands led to these: Single Double Get your bids in now!