Trivia Answer #33 - False. Any account with UID 0 has superuser privileges, and multiple accounts with the same UID are allowed. Attackers will sometimes create additional UID 0 accounts (or change the UID of an existing account) as a back door.
This means that web requests that take longer than usual to be fulfilled may be logged later than shorter duration requests that were actually received after the slow web request. Shout outs to @DfirNotes and @mboelen on this one!
Trivia Answer #32 - It is actually not uncommon to find Apache log entries out of chronological order. The log timestamps show the time the web request was received, but the log entries are not written until the web response is completed.
The fascinating part about that job is when you get down to the architecture as originally designed before all the other stuff got precariously piled on top of it.
I was filing bug reports on “Sunlink DNI” (DECNET over IP for SunOS) back in 1988. Nobody really cares about the resolution because, well, it’s DECNET over IP.
Joking with some colleagues and I said, “I have bug reports that are older than some of you!” And we all laughed until we realized it was actually true. And then it got real quiet.
Daily Linux Forensics Trivia #32 - You find entries in an Apache web server log whose timestamps are out of chronological order. Does this mean the log has been tampered with?
Let's start with traditional aka "Vixie" cron (yes, named after @paulvixie who isn't just "that BIND guy") which uses /etc/crontab, /etc/cron.d, and /var/spool/cron/crontabs
Trivia Answer #31 - Kudos to @CraigHRowland for checking in with a scarily complete answer. Honorable mention to @jwmwi. The full answer is long, so buckle up friends...
And their constituents don’t care because they view any opposition as an existential threat. Keeping score on political hypocrisy doesn’t move the needle anymore.
In all seriousness we’ve seen remote exploits with all of the popular brands with some regularity. The firmware in these devices seems like it’s mostly crap. Poor Fortinet is just the exploit du jour.