Comment on Lemmy is a tech literate echo chamber

• pivot_root@lemmy.world ⁨1⁩ ⁨day⁩ ago

  Who’s going to win?

  SELinux+Seccomp+Containers…
  Or the sysadmin with sudo and chmod.

  Neither! It’s whichever script kiddie that gets lucky first.

  source
• TranquilTurbulence@lemmy.zip ⁨1⁩ ⁨day⁩ ago

  Oh, but you gotta drop a chmod nuke at least once to feel the terror having done something irreversible. As a bonus, you’ll also gain a brand new appreciation for snapshots.

  source

  • lars@lemmy.sdf.org ⁨1⁩ ⁨day⁩ ago

    sudo chmod 000 / for security

    source

    • TranquilTurbulence@lemmy.zip ⁨1⁩ ⁨day⁩ ago

      And it’s also so much faster than full disk encryption. Cool little trick the admins don’t want you to know.

      source

      • lars@lemmy.sdf.org ⁨20⁩ ⁨hours⁩ ago

        You don’t even need to do it recursively:

        sudo find / -path '/*/*' -prune -o -exec chmod 000 {} +
        

        This is extremely fast.

        source