Tag Info

New answers tagged

2

The report is authenticated at Russian Hackers Amass Over a Billion Internet Passwords - NYTimes.com. But much remains unclear, and even the times didn't note the conflict-of-interest that Hold Security is setting up by speaking in scary but unspecific terms about this, and only offering their own paid services to help victims out, as you allude to. I'm ...


1

In the United States identity protection usually consists of getting notices when credit is taken out in your name or locking your credit profile by using a claim that your identity has already been compromised. Considering the legal limits mentioned below that seems to have little value to me but perhaps it would help you sleep at night. Suggest you use ...


1

Being disconnected results in an annoyance for legitimate users if we make a mistake coding the "misbehavior detection" With proper code review, mistakes like these can be avoided. Killing the client eliminates the need for "clean up" response code. Although it is important to "kill" a malicious client in order to prevent further issues, personally, ...


10

Stay calm, and be nice to the person reporting this. If they are contacting you, they only want to help, so do not threaten them. Also don't ignore them, make sure they understand that you are interested in fixing this. Explain to them that you need time to do this; ideally you can give them a time frame in which you think that you can have this fixed ...


-1

I think just an URL is not good enough to prove that your site is insecure(in most cases). I assume that you might know neither the security architecture nor the functionality of your site, i suggest you to take things(reported URL) to your IT department. It would be great if they are able to identify the problem. If not ask that critic for more ...


0

First thing is to follow Tim's advice with regard to responding to your contact. If it isn't clear what the nature of the problem is it would be worth asking them for more information as they appear to be interested in helping. I suspect since you are asking here you don't have access to developers with experience of secure development or an IT department ...



Top 50 recent answers are included