New answers tagged

3

Your action is justified from me. I have never been asked from any major and respectful company such information, neither for a service, nor even for account recovery. Send a message to the official support team and see if these info are actually needed if this thing causes you lots of inconvenience. But be aware of this - you might be scammed.


1

Have a techie setup Windows on Qubes and teach the exec to separate trusted and untrusted/personal activities (rightclick - open colleagues 'fun' links in Disposable VM or resend to personal mail address before opening). Setting up Qubes might be quite techie, using it is mostly about secure copy-pasting and where to open / make accessible which file, extra ...


23

Note: I like honeypots a lot but to answer your question some negative aspects include: You are not reducing your workload. You are increasing the amount of signals you have to process. You are increasing your operating costs. You are taking time away from other security activities which may otherwise help protect actual data & services. You may be ...


25

It's a lot of work. Not only that, but it's a lot of work that your (legitimate) users will never see or benefit from. Most people would be willing to trade off the nebulous risk of deterring a small subset of hackers (realize that APT hackers, in particular, wouldn't be dissuaded and might even find an extra way into your system if you do something wrong ...


3

RAP is very similar to a stack canary, except designed to prevent against ROP. EDIT: After speaking to spender from grsecurity, it turns out that what I'm describing here is a subset of the RAP functionality, specifically the return pointer protection. RAP is actually callled "Reuse Attack Protector", which is designed to protect against all forms of ...



Top 50 recent answers are included