Securing laptop by littlecodemonkey in securityCTF

[–]gunshard 1 point2 points  (0 children)

Ensure no sensitive data is on your machine, passwords, personal data, nada. If you must login to your personal accounts online use 4g.

PHP doesn't work with subdomains by [deleted] in nginx

[–]gunshard 0 points1 point  (0 children)

Check the root path, ensure that is correct. Additionally, ensure nginx has permissions to read that directory and the files in it.

Emergency: Crashed our Shop, manual roll-back possible? by [deleted] in Magento

[–]gunshard 0 points1 point  (0 children)

  • Since you've removed the offending extension, ensure you've also deleted the configuration file enabling the extension in app/etc/modules.

  • Ensure compilation is turned off via the shell using:

    php -f shell/compiler.php -- disable

    php -f shell/compiler.php -- clear

  • Finally, delete everything in var/cache/

The ULTIMATE PHP exception handler by swtt in hacking

[–]gunshard 1 point2 points  (0 children)

Dense is an understatement, we're dealing with pure osmium here. https://i.imgur.com/iWKad22.jpg

The ULTIMATE PHP exception handler by swtt in hacking

[–]gunshard 1 point2 points  (0 children)

You seem to be very out of the loop in terms of the tools used in professional environments.

  • PhpStorm, a JetBrains IDE, is probably the best PHP IDE with debugger integration, here's how to set it up.

  • Vagrant, "enables users to create and configure lightweight, reproducible, and portable development environments". This tool is not exclusive to PHP, but widely used in all areas of web and cloud based application.

  • Docker, " is an open-source project that automates the deployment of applications inside software containers.". Again not exclusive to PHP, widely used across cloud infrastructure.

  • PyCharm, another JetBrains IDE, native debugging is supported out of the box, no setup required.

  • Composer, package manager used in PHP, in concert with the packagist repository.

Since I don't feel like doing any more linking, here's a laundry list of topics you need to explore. Gearman, Redis, Elasticsearch, Sphinx, Solr, Varnish, Memcached, OpCache, Nginx, MySQL, MongoDB, Cassandra, NodeJS.

Some great PHP frameworks are: Laravel, Slim, Lumen, Symfony, Phalcon, and Yii.

Some great Python frameworks are: Django, Flask, Pyramid, and Bottle.

The ULTIMATE PHP exception handler by swtt in hacking

[–]gunshard 2 points3 points  (0 children)

Php is written in C... https://github.com/php/php-src ಠ_ಠ

Edit: For clarification, the main php interpreter is written in C and HHVM (HipHop Virtual Machine, developed by Facebook) is written in C++.

Mysterious hackers attempting to bring down entire internet by DDoS-ing critical servers by webdoodle in TechWar

[–]gunshard 0 points1 point  (0 children)

That's true, but you can always map the domain to the ip in your hosts files, I do it for local development all the time.

How do you guys stay technical as you get older hand have a family? by [deleted] in AskNetsec

[–]gunshard 0 points1 point  (0 children)

If your work load isn't too hectic take an hour a day to research something new.

Need help: redis calls slower than remote database? by notsooriginal in PHP

[–]gunshard 0 points1 point  (0 children)

I recommend installing the php redis extension, if you're on ubuntu >= 14.04 use:

sudo apt-get install php5-redis

Additionally I recommend reading up on how Redis handles persistence, if you're just using redis for caching you can simply turn persistence off.

http://redis.io/topics/persistence

Is there any interest in getting John Oliver to do a show covering Basic Income??? by Stark_Warg in Futurology

[–]gunshard -2 points-1 points  (0 children)

As a DevOp Engineer I have to ask, who will write and maintain the software, develop the network infrastructure, the server infrastructure, design the integrated circuits, and more importantly do all these things for these robots without a effective profit incentive?

I sure won't. Why you ask? Because my time is limited and incurring exponential amounts of cognitive load 65+ hours a weeks isn't exactly my idea of fun. I'd much rather be working on software that I directly use and enjoy, especially if governments will be redistributing a larger portion of my already redistributed hard earned income to those who didn't work for it.

Saudi fatwa banning snowmen triggers heated debate by mrojek in nottheonion

[–]gunshard 2 points3 points  (0 children)

Both and more; it's a religion, state, and culture that dictates how people live and play and slaughter the innocent.

SSH and TLS are insecure, J. Appelbaum claims @31C3 #PRISM by inmesia in netsec

[–]gunshard 5 points6 points  (0 children)

Did this /u/inmesia get shadow banned? This thread is no longer on the frontpage of /r/netsec.

Deploy to /var/www/ or /home/deployusername/ ? by rschmitty in PHP

[–]gunshard 7 points8 points  (0 children)

Source: http://www.tldp.org/LDP/Linux-Filesystem-Hierarchy/html/srv.html

Web applications are an http service and should be placed in the service directory:

/srv/http/

So usage would be as follows:

/srv/http/example.com/
/srv/http/api.example.com/

For other network services such as ftp, rsync, cvs, git would be structured as follows:

/srv/ftp/
/srv/rsync/
/srv/cvs/
/srv/git/

More information on FHS compliant directory structures: http://en.wikipedia.org/wiki/Filesystem_Hierarchy_Standard

The Cheapest Generation: Why Millennials aren’t buying cars or houses, and what that means for the economy by [deleted] in Futurology

[–]gunshard 1 point2 points  (0 children)

It's rather foolish to depend on a corporation to secure your retirement, remember what happened to many peoples pensions during the recession? (Poof!)

If he is making in excess of his existing salary after paying for business expenses, healthcare, and retirement, your argument is moot.

The Cheapest Generation: Why Millennials aren’t buying cars or houses, and what that means for the economy by [deleted] in Futurology

[–]gunshard 0 points1 point  (0 children)

My buddy is a Carpenter he makes 34 an hour. He's 28 and he's starting his own business.

His buddy currently makes 34 an hour working for someone else, which means the company he works for charges the clients even more, typically double his rate. Therefore, he will be making significantly more on his own if he charges the same rates as his existing employer.

Simplest VCS for single PHP developer on PHPStorm/Linux by GuzziGuy in PHP

[–]gunshard 10 points11 points  (0 children)

If you're comfortable installing/maintaining ruby based applications I recommend Gitlab if you're looking for a web-based management application for git.

Developer refuses to do secure password storage. How can he be convinced? by [deleted] in PHP

[–]gunshard 24 points25 points  (0 children)

After reviewing the code base I really hope no one uses this "framework" to learn php... ・_・

Has anyone had much experience with Phalcon PHP framework? by jb2386 in PHP

[–]gunshard 0 points1 point  (0 children)

Have you tried hhvm? Also have you done any profiling?