Portál Stack Overflow po roce opět vyzpovídal své uživatele, jedná se především o vývojáře softwaru, a zveřejnil detailní výsledky průzkumu. Průzkumu se letos zúčastnilo více než 80 tisíc vývojářů. Z Česka jich bylo 792. Ze Slovenska 252. Celkově bylo 91,67 % mužů a 5,31 % žen.
Valentina Palmiotti ze společnosti Grapl v příspěvku na blogu podrobně rozebírá bezpečnostní chybu CVE-2021-3490 v Linuxu, konkrétně v eBPF, zneužitelnou k lokální eskalaci práv. Chyba byla v upstreamu opravena již v květnu.
Od pátku 6. srpna do neděle 8. srpna proběhne online The Raku Conference, tj. konference věnovaná programovacímu jazyku Raku.
Zítra končí bezpečnostní konference Black Hat USA 2021 (Twitter) a začíná bezpečnostní konference DEF CON 29 (Twitter). Kvůli COVID-19 letos probíhají obě konference hybridně, v Las Vegas i virtuálně. V rámci Black Hat budou vyhlášeny výsledky letošní Pwnie Awards (Twitter). Pwnie Awards oceňují to nejlepší, ale i to nejhorší z IT bezpečnosti (bezpečnostní Oscar a Malina v jednom). Viz nominace.
Utilita Netcat - Švýcarský armádní nůž pro TCP/IP existuje v různých variantách a lze ji používat k různým účelům. Někoho může překvapit, že také k tisku na některých síťových tiskárnách.
MojeFedora.cz zve na online konferenci Nest with Fedora 2021 (Flock to Fedora). Konference proběhne od čtvrtka 5. srpna do soboty 7. srpna, vždy od 14:00. Na programu je řada zajímavých přednášek.
CrossOver, komerční produkt založený na Wine, byl vydán ve verzi 21. Přehled novinek v ChangeLogu. Verze 21 je založena na Wine 6.0 s více než 8 300 vylepšeními.
Byla vydána videohra o stínech minulosti Svoboda 1945: Liberation. Druhá světová válka skončila, ale ve vesnici Svoboda na česko-německém pohraničí mír nenastal. Přijeli jste rozhodnout desetiletí trvající spor. Komu věřit? Jak s tím souvisí vaše rodina? Vyzpovídejte svědky a odhalte pravdu o vlastní minulosti ve hře, jakou jste ještě nehráli.
Dnes 3. srpna od 20:00 a o týden 10. srpna od 20:00 proběhne online konference Qubes virtual mini-summit 2021 věnovaná operačnímu systému zaměřenému na bezpečnost Qubes OS (Wikipedie). Přednášky lze sledovat na YouTube.
Po půl roce od vydání verze 2.33 byla vydána nová verze 2.34 knihovny glibc (GNU C Library). Přehled novinek v poznámkách k vydání.
root@mail:~# tail -f /var/log/syslog Nov 12 11:23:14 mail named[16894]: client 68.2.181.144#57619: query (cache) 'sema.cz/ANY/IN' deniedTie zaznamy sa stale opakuju
root@mail:~# tail -f /var/log/query.log client 68.2.181.144#26821: query: sema.cz IN ANY +E (192.168.0.31)Chcem len vediet ci to mam dobre zabezpecene, alebo nieco mi tam este chyba. Na nete som asi nieco ako open dns, ale to moc nechcem. Konfiguraky: named.conf
AbcLinuxu.cz
ITBiz.cz
HDmag.cz
AbcPráce.cz
root@mail:~# cat /etc/bind/named.conf
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
include "/etc/bind/rndc.key";
controls {
inet 127.0.0.1 allow { localhost; } keys { "rndc-key"; };
};
trusted-keys {
dlv.isc.org. 257 3 5 "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx";
};
named.conf.local
root@mail:~# cat /etc/bind/named.conf.local
logging {
channel query.log {
file "/var/log/query.log";
// Set the severity to dynamic to see all the debug messages.
severity debug 3;
};
category queries { query.log; };
};
+ Zonove zaznamy
named.conf.options
root@mail:~# cat /etc/bind/named.conf.options
acl "allowed" {
192.168.5.0/24;
192.168.10.0/24;
localhost;
localnets;
};
options {
directory "/var/cache/bind";
allow-query { any; };
allow-recursion { allowed; };
allow-query-cache { allowed; };
forwarders {
8.8.8.8;
8.8.4.4;
195.210.29.64;
};
rate-limit {
responses-per-second 5;
};
forward only;
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
also-notify {};
fetch-glue no;
};
root@mail:~# time tail -f /var/log/query.log client 221.229.162.197#30569: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#30569: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#6948: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#6948: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#1216: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#1216: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#45720: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#45720: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#11571: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#11571: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#1768: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#1768: drop REFUSED response to 221.229.162.0/24 client 80.250.115.133#22297: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#22297: drop REFUSED response to 80.250.115.0/24 client 80.250.115.133#58805: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#58805: slip REFUSED response to 80.250.115.0/24 client 221.229.162.197#17687: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#17687: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#3585: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#3585: drop REFUSED response to 221.229.162.0/24 client 80.250.115.133#16553: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#16553: drop REFUSED response to 80.250.115.0/24 client 221.229.162.197#9780: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#9780: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#49030: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#49030: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#4523: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#4523: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#63228: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#63228: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#29943: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#29943: slip REFUSED response to 221.229.162.0/24 client 80.250.115.133#2142: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#2142: slip REFUSED response to 80.250.115.0/24 client 221.229.162.197#12853: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#12853: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#18454: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#18454: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#12803: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#12803: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#11976: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#11976: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#42548: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#42548: drop REFUSED response to 221.229.162.0/24 client 80.250.115.133#27375: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#27375: drop REFUSED response to 80.250.115.0/24 client 221.229.162.197#17555: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#17555: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#46601: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#46601: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#51315: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#51315: slip REFUSED response to 221.229.162.0/24 client 80.250.115.133#48420: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#48420: slip REFUSED response to 80.250.115.0/24 client 221.229.162.197#33798: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#33798: drop REFUSED response to 221.229.162.0/24 client 80.250.115.133#3435: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#3435: drop REFUSED response to 80.250.115.0/24 client 221.229.162.197#58059: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#58059: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#62829: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#62829: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#25584: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#25584: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#32870: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#32870: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#64117: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#64117: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#21581: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#21581: drop REFUSED response to 221.229.162.0/24 client 80.250.115.133#48471: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#48471: slip REFUSED response to 80.250.115.0/24 client 221.229.162.197#39125: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#39125: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#64811: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#64811: drop REFUSED response to 221.229.162.0/24 client 80.250.115.133#50582: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#50582: drop REFUSED response to 80.250.115.0/24 client 221.229.162.197#2589: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#2589: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#42520: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#42520: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#14914: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#14914: slip REFUSED response to 221.229.162.0/24 client 80.250.115.133#19227: query: wradish.com IN ANY +E (192.168.0.31) client 80.250.115.133#19227: slip REFUSED response to 80.250.115.0/24 client 221.229.162.197#6794: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#6794: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#57811: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#57811: slip REFUSED response to 221.229.162.0/24 client 221.229.162.197#46059: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#46059: drop REFUSED response to 221.229.162.0/24 client 221.229.162.197#7354: query: wradish.com IN ANY +E (192.168.0.31) client 221.229.162.197#7354: slip REFUSED response to 221.229.162.0/24 real 0m1.260s user 0m0.004s sys 0m0.000s
Nevidím tam nikde DNSSEC, takže to máš naprosto nezabezpečené.
Tiskni
Sdílej:
