Reputation
9,269
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 16 59
Newest
 Good Answer
Impact
~510k people reached

Aug
1
comment SIP DoS classifications
Thanks! As for why, it's a community guideline (see "Provide context for links"). I do see your point though!
Aug
1
comment How to prevent swapping on Mac osx?
The question is about swapping, not about information security. It just so happens to be about Tails, but it could have been any other OS. Voting to move to SuperUser.
Aug
1
comment SIP DoS classifications
It's recommended to highlight the most important parts of the article you linked in case the link goes dead.
Jul
10
comment How does the password become 30,000 times stronger?
@JekwA Using 7-bit ASCII, I count 127-32=95 printable characters. Minus 10 digits and 52 letters (uppercase and lowercase), you get 33 special characters, which includes space. Excluding space you have 32 special characters. Both get close to 30,000 (one above, one below).
Jul
10
comment How does the password become 30,000 times stronger?
@user80723 No, it's just ones and zeros to the computer. The byte 00111000 (which we read as 8) is the same to a computer as the byte 00100001 (which we read as !).
Jul
1
comment Is writing to /dev/null secure?
@ott-- sure, though it's sort of inconvenient if every user overwrites the file (stdout > /dev/null) instead of appending. That's why I made it a fifo... but of course you're right :)
Jun
19
comment Trying to keep high school students out of the Wi-Fi network
Point #1? Good idea. Point #2? Wtf. If I was a teacher there I'd make a program that automatically fires off emails to whitelist every DNS request my system does until this annoying shit is gotten rid of.
Jun
1
comment Is a longer WiFi password more secure?
MAC filtering is the single most annoying thing you can do if you have any friends who might ever visit you. My uncle's computer guy thought it was an amazing security feature (despite being easily cloneable) and now nobody ever has wifi at theirs. Big pain in the ass for everyone.
May
27
comment Can attackers get anything with DoS attacks except crashing the service?
@RoryAlsop that should be an answer.
Mar
31
comment UDP Traffic is blocked
DNS can use TCP as well.
Feb
8
comment How long to brute-force WPA password?
@rox0r "I know no one would use md5 hashes for keys" /me shuffles away, muttering he thought it was a good idea :(
Feb
1
comment Why did Facebook not use HSTS for a long time after it became available?
"I can't think of any practical reason to disable secure browsing." I can: speed. If you only use it from home and you're the only user on the network, the security risk is negligible for most people.
Dec
2
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
I'm sure this is all technically true, but talking about your self-invented 5 tiers of security does not answer the question. And disclosure would be used when you are a certificate reseller, not when you (like most of the people here I think) got a website with a (hopefully signed) certificate.
Nov
23
comment How do major sites prevent DDoS?
@NewWorld Well google for it, it's not hard to find. One example is PayPal (Ebay-owned) being DDoSed by "Anonymous" not too long ago.
Nov
21
comment How do major sites prevent DDoS?
"Have you?" Yes.
Nov
5
comment Would it be possible to verify ownership of digital currency without a network connection to an authority server?
@AndrewHoffman user10008 is right, Bitcoin is exactly this. It's decentralized and prevents double spending. You should read up on it.
Oct
21
comment One liner to create passwords in linux?
Base64 has 64 possible characters while there are in fact 95 printable characters. Would not recommend.
Oct
21
comment One liner to create passwords in linux?
I would not use this answer because any hash-sum (md5sum, sha256sum, ...) outputs hexadecimals. They contain only 4 bits of randomness per byte while being just as hard to remember as any same-cased alphanumeric string. There are lots of packages and other ways to do this properly, even if you only use tools that are available on almost every Unix-like OS.
Oct
20
comment is there a risk in increasing esmtp header line length against rfc5822 - asa/pix question
Well, if I was sure about an answer I would post it :). But if you test with longer headers to make sure it doesn't crash anything, it is probably okay, at least until you find out more.
Oct
20
comment is there a risk in increasing esmtp header line length against rfc5822 - asa/pix question
How about increasing the limit instead of removing it? I could imagine that a multi-gigabyte header might crash things, so setting a reasonable limit (at least for the moment) might be a good idea.