Hot answers tagged

6

From this support thread on the LastPass website: LastPass says they never receive my Master Password. Don’t I send it to the LastPass servers when I log in? No, when you login to LastPass, two things are generated from your Master Password using our code discussed previously before anything is sent to the server: the password hash and the ...


5

Yes. A Harris Stingray, Boeing DRT box, or other cell simulator can intercept SMS messages. These are monitoring devices that have secretly been used by police agencies for over a decade. They come with strict non-disclosure agreements where the agencies that purchase them are not even allowed to acknowledge their existence to the public, and certainly ...


5

SQRL certainly is not without flaws, but it's certainly superior to the primary authentication solutions widely used on the web today in terms of security and (and this is important) usability. Allow me to explain. Misconceptions First, let me clear up a few of the misconceptions present in some of the other answers on this question. Many of these answers ...


4

Option 1 From the basic understanding of the DDOS attacks is that the attacker is sending a lot of data to the web server. Not in every case, the slowloris and SYN flood attacks do not send tons of data yet they are classified as DDoS. Each host attacking the target sends just a little information, enough to clog the victim's network and prevent it ...


4

Most modern databases store metadata in regular tables (Information Schema) so if there is an SQL injection the attacker will eventually find out every necessary information for exploitation, including your naming schemes. In case of Wordpress and other popular software custom settings may help dodge some automated attacks, as primitive exploits may assume ...


3

For such a beginner and general subject (no offense! everybody has to begin somewhere!) such as iptables, any Linux distribution would be fine. Choose one with which you feel comfortable, does not cause incompatibilities with your hardware and provide a large choice of packages so you will not be limited when having to install new software. DistroWatch is a ...


3

I've never used much Ubuntu and never used BackTrack. But Kali is supposedly an improved distribution of BackTrack since it was (and is) developed by the same developers. (and BackTrack is no longer being maintained) And besides that Kali already comes with a lot of tools to test security, make penetration tests, and it comes with iptables also, so you can ...


2

As the very good posts above have mentioned, there is no perfect fit for 'the right distribution' to learn Linux. The good thing though, is all of them will be very helpful in learning Linux given their common foundation. The reason nobody is willing to recommend a flavor of Linux is not because we all do not have preferences, but rather because the ...


2

Really, the question you are linking to answers your question. These are very brief explanations of why these options wouldn't work. For more detail see the question linked to in your question. Option 1: Even that server has a limit to the number of users it can handle. A DDOS would have to reach that limit to be effective. Option 2: If the entire botnet ...


1

I am very skilled in cursive handwriting, and I can tell you that such skill has little to no effect in forging another person's signature. Most often, people forget how cursive really works and just memorize a fast signature. This makes scrawled messes like you can usually find on a doctor's note common, and any real ability in cursive only makes you more ...


1

The digital world offers many things that don't apply in the physical world in most cases which make it more likely that a criminal will both (a) target you and (b) succeed: A high degree of anonymity Difficulty of law enforcement to catch you Ambiguity of the law surrounding your actions Nearly unlimited ability to try, with very little chance of being "...


1

It might be worth checking out Public and Private key Cryptography(asymmetric). I speculate, they could use asymmetric cryptography. When a you register a new device, create a keypair on said device send the public key to the old device, encrypt the original private key with the public key of the new device, send it to their servers and then to your new ...


1

At the very core, a denial of service (DoS) means using a service in such a way that disrupts other users use of the service. If a user that is uploading a big file causes the server to exhaust some resources and end up rejecting requests from other users, that's a DoS. A DoS does not require intent of malice. Any service disruptions counts as denial of ...



Only top voted, non community-wiki answers of a minimum length are eligible