New answers tagged

0

A lot of what I discussed in this answer about alternate SSH ports is applicable to this question. Since your goal is to be as invisible as possible*, I think your best bet is secure port knocking with a tool like fwknop (as noted in this crypto.SE question) or perhaps a custom one-time password scheme for sufficiently complicated port knocks (to help ...


4

Yes, the VPN provider is able to see your data. If the data are not encrypted (i.e. HTTPS) the provider will be able to get to the clear text and will also be able to manipulate the data. The usual protections of HTTPS apply, i.e. the provider will see which site you visit but not the clear text data itself because they are encrypted. The provider will also ...


0

The main benefit of separate keys is what happens in the worst-case scenario: someone gets your private key. SAME key on all hosts: The bad guys now have access to everything. DIFFERENT key on each host: The bad guys only have access to one thing. So--most secure? Unique keys for each host.


3

The idea of a super cookie is that you cannot easily delete it. It consists of replicas of the information on multiple places and if you delete some of these the information will be restored from the remaining places. Some possible places are: Simple cookies. These can usually be easily deleted. But one can make it harder if multiple sites cooperate so ...


2

There isn't any real magic here. The thought is that it is non-trivial to trace a message to it's physical location. It generally involves support by the ISP and is strongly regulated by the prevailing laws. So, while it is possible to trace messages, it requires some effort. If I use an intermediate relay, the thought is that anyone tracing packets to my ...


1

While this is a good idea in theory it can not work practically. The TCP protocol uses a three-way-handshake, and so when you spoof the origin IP in a packet the packet with the SYN flag (First packet) will be sent but when the destination machine tries to establish a connection by sending an SYN-ACK packet back to that spoofed IP, the connection will fall ...


0

Let's assume you just ask out of curiosity and we are not helping you committing a crime. So why would you want to modify the TCP Header and redirect packets to another host? I am not sure if that could work at all but if you had a compromised computer, why don't you do whatever you have in mind from there? Also if the compromised computer is offline it ...



Top 50 recent answers are included