2d
comment How to tell ScheduledExecutorService to ignore overlapping executions after resuming computer from suspension/hibernation
I had forgotten about this question, but yes; this is what I ended up doing. It is good to have some confirmation though, because I haven't got a lot of experience on this, and I was worried that scheduling this way could be a bad practice (something like: what if there is an abnormal termination I didn't account for, like not enough resources to execute the update thread, and the next update doesn't get scheduled?), and so I thought that maybe the standard practice was something different I wasn't finding anywhere because I didn't have a name for it.
2d
accepted How to tell ScheduledExecutorService to ignore overlapping executions after resuming computer from suspension/hibernation
Apr
22
revised while loop calling function but only for first line, Serverlist.txt contains multiple server details
added 2 characters in body
Apr
21
awarded Inquisitive
Apr
20
revised How to tell ScheduledExecutorService to ignore overlapping executions after resuming computer from suspension/hibernation
edited title
Apr
20
asked How to tell ScheduledExecutorService to ignore overlapping executions after resuming computer from suspension/hibernation
Apr
19
comment Drupal server compromised - I want to investigate the attack technique / compromise
You got on my nerves and I wrote you an explosive comment, then I realized you are just trying to help and decided to erase it. Anyway, I will just say this: That's precisely what a privilege escalation is about; getting permissions you don't have. The web server did not have write permissions on the web app root. It was properly configured. Once you compromise the database and get writing access to sites/[your-site-name]/files you can do all sorts of nasty things like dropping some code and wait for somebody with enough permissions (like an updater process) for executing it.
Apr
19
awarded Critic
Apr
19
awarded Commentator
Apr
19
revised Drupal server compromised - I want to investigate the attack technique / compromise
added 147 characters in body
Apr
19
revised Drupal server compromised - I want to investigate the attack technique / compromise
added 243 characters in body
Apr
19
answered Drupal server compromised - I want to investigate the attack technique / compromise
Apr
19
awarded Nice Question
Apr
18
comment Drupal server compromised - I want to investigate the attack technique / compromise
@dotancohen I have been reviewing the logs from the last few weeks but so far no luck. Since it was a server I was using to try out drupal features I had about 30 modules installed, on top of the 40 that already come with drupal. Here is a list of the extra ones, if you are interested: pastebin.com/BeYhi9XF (also a tree: pastebin.com/4j8MN8yn; and a tree with files: pastebin.com/uh6WCMbe)
Apr
18
revised Drupal server compromised - I want to investigate the attack technique / compromise
removed probable github password compromise (I am positive no pushes were ever made from that server, only clones and pulls, which means I have never used my github password on it)
Apr
13
comment Programmatically expire all sessions on Java web application restart
that would work too, but the main problem remains; I need to do the check every time I get the session object. What I would like is a way to do that automatically, like a listener or an override or a wrapper...
Apr
13
comment Drupal server compromised - I want to investigate the attack technique / compromise
It has been pointed out already and that's why I immediately restricted internet access to it. Now I am doing just doing forensics on it, and considering open it again under surveillance to monitor what happens (and stop it before it happens, of course) which is proving to be really hard work but quite interesting. Any further advice on which logs to review and how will be greatly appreciated.
Apr
13
revised Drupal server compromised - I want to investigate the attack technique / compromise
edited body
Apr
12
revised Drupal server compromised - I want to investigate the attack technique / compromise
deleted 25 characters in body
Apr
12
comment Drupal server compromised - I want to investigate the attack technique / compromise
Thanks, for the advice. Sorry about being so cranky. The answer you both point me to is actually very good aadvice on what to do if I ever discover a break in on a client's production machine. I was not worried about this, because it is more a toy server to experiment than a production thing: just one of those AWS micro instances; but I got so absorbed by it that I haven't even slept today. Time to got to bed :-)
1 2 3 4 5