Tag Info

New answers tagged

2

The registrar verifies the identity of the user (in a comment you said that the user is not anonymous towards the registrar). Identification means that each user has some kind of unique identifier. That could be their social security number, their real name + birthday + birthplace or something like that. The registrar uses a cryptographically secure hash ...


0

I'd like to mention another problem: This can be a usability catastrophe... This block can be very annoying (happened to me more than once). Consider the case of an internet provider with native IPv6 adresses where IPv4 is only available through NAT. Let's say there are 1000 people behind this NAT, i.e. 1000 people with the same IP address. If you ban only ...


0

If anything, how far can they go? So far, that they can get your IP address. And that they can get without being so suspicious. I don't know if it still exists, but Skype had a bug which allowed revealing users IP just by knowing his skype username. I don't think there is any other possible exploit that would allow him some access.


1

You are probably not sending 4Mbps of data with that script, because that script tries a TCP connection on port 80. It will of course fail as you haven't got a web server running, so it will be difficult for your server to reach those sustained 4Mbps of traffic towards your home connection. That script will be sending SYN packets and waiting for a SYN ACK ...


2

A tool like HP ArcSight can be customized very deeply, and just writing the right use cases and rules to correlate relevant events and alert on meaningful incidents, is super hard. Many organizations fail miserably implementing ArcSight. Just getting raw logs through connectors to logger and then to ESM, and then writing use cases is a project that ...


0

Adding on to the other answers, another solution is to allow your user to login using an alternative mechanism when the "usual login page" has been disabled. For example, in addition to the password he needs to supply one or more of these: an SMS code a hardware dongle a code sent to secured email To guard against DoS, this alternative mechanism should ...


1

If these were propositions made in the context of information security, then they all would be examples of security through obscurity. From the Wikipedia article linked: In security engineering, security through obscurity is the use of secrecy of design or implementation to provide security. Security through obscurity is discouraged and not recommended ...


2

An NIDS would not be able to detect a buffer overflow for a couple of reasons. It's impossible to know what the target platform for the payload is; strictly based off of network traffic. Exploits at the network level most likely target some application or daemon on the other side. The buffer overflow is likely targeting a specific vulnerability, and this ...


2

Given the fact that the hackers had access to the servers and their data, then they had direct access to the HTML files. Protection against such an attack is very broad in scope, because you have to protect yourself against all forms of intrusion into your network.



Top 50 recent answers are included