meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 10 months |
| seen | May 14 at 21:12 | |
| stats | profile views | 8 |
|
Jan 26 |
comment |
Can law enforcement track a criminal through dynamic IP address? As far as I know the police are generally incompetent at comparing dynamic IPs with an ISPs logs of who they belonged to at the time. Depending on your configuration you may be able to wait for your computer to come online, then access its remotely |
|
Jan 26 |
comment |
Can wiped SSD data be recovered? In some ways yes: Data is not always overwritten, In other ways no: Due to garbage collection on modern SSDs the longer a drive is in use the harder it will be to locate and read the data. |
|
Jan 26 |
comment |
How to lure a Hacker? If you suspect an intruder a review of your relevant logs will provide all the info you need/can get |
|
Dec 4 |
comment |
Would publishing a network diagram make the network less secure? It wont make it 'more possible' to breach a network, however, it will make it much faster. |
|
Oct 26 |
comment |
Parabolic Denial Of Service — Would it work? Could this be used to even greater effect with multicast? |
|
Oct 26 |
comment |
using network switches to prevent malicious promiscuous mode usage I like this answer. I would like to add a note about IDS though. If op is concerned enough about active sniffing using an IDS is a must. They will be able to detect exactly this sort of behavior, responding accordingly. |
|
Oct 5 |
comment |
L2TP/IPsec shared secret: Can it be public? IPSec is (usually) a dedicate box between users and the net that uses a shared secrete to encrypt/decrypt |
|
Oct 5 |
comment |
can vps be made as secure as having two dedicated server computers? Yes, please do make your poster clearer. I would also say VM is going to be your best bet. Even if the instance is compromised it would take specific mal-ware to access the box. |
|
Oct 3 |
comment |
Nexus 7 (Or any other good android tablets) For pen testing Portability / Social engineering -- a lot more suspicious to be typing away at a laptop |
|
Oct 3 |
comment |
Does Username + Password + Pin improve login security? your right, I should have mentioned that. I would add that requiring the user to included 4 numbers also boosts security |
|
Oct 2 |
comment |
How can I decode a message that was encrypted with a one-time pad? One time pads can be "decrypted" into anything, making them unbreakable. They are used by sovereign head of states (including USA) to communicate. Their one "vulnerability" is distribution of the key. |
|
Oct 1 |
comment |
Ettercap (dns_spoof) there is a lag till I can |
|
Sep 29 |
comment |
IP attack by reading/writing data? Your right, my bad. I should have paid closer attention. |
|
Sep 28 |
comment |
Should ettercap make the targets this slow? Two things: a) I was streaming music at the time, when I stopped the targets were able to communicate. And b) Dont I want to be able to drop packet and wont enabling ip forwarding remove the capability? |
|
Sep 25 |
comment |
Should ettercap make the targets this slow? all I can think is maybe the system api lib-net uses have been deliberately throttled. Would using an eternal adapter help? |
|
Sep 21 |
comment |
How secure is this login page? thanks, I know the question sucked, I will have to do some more research on this. |
|
Sep 19 |
comment |
How secure is this login page? ok, its not the best question. But is does address a point: is a page secure without SSL? |
|
Jul 10 |
comment |
How should I tell an organisation that they are vulnerable when I wasn't given permission to check? It does not like theses people attempted any security -- just send them an email. |
