Reputation
1,769
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
10 24
Newest
 Necromancer
Impact
~49k people reached

Feb
3
comment Why is leaving a passworded SSH over the internet so bad?
@TOOGAM It sounds like you are unaware that OpenSSH already uses privilege separation and has done so for over a decade.
Feb
3
comment Why is leaving a passworded SSH over the internet so bad?
I found that merely hardening sshd a bit killed the vast majority of the bots out there, making them unable to communicate with the server. There is no longer enough brute force traffic to trigger fail2ban!
Jan
17
comment Why bother with attack detection?
All I ever get these days is (1) automated responses and (2) nothing.
Jan
12
comment Home Banking, antivirus safe environments OR Linux on virtual machines?
Have you considered instead running Linux and putting Windows in a VM?
Jan
5
awarded  Necromancer
Jan
2
comment Is there a secure way to transfer data outside the Internet?
Wait, what SD card reader doesn't use USB?
Dec
16
comment What can I do if I discover that my password hash has been leaked in pastebin?
This was probably wallofbricks.com , which is run by one dwalton76, and which domain name was registered a week before his first login...
Dec
7
comment Risk of tampering when hardware shipment is delayed
I've been shipping and receiving packages (e.g. from eBay) and I've noticed a lot of delayed packages. It's probably not just you. This seems to happen every December.
Nov
28
comment Best way to administer all my passwords
martinvigo.com/even-the-lastpass-will-be-stolen-deal-with-it
Nov
26
comment Can USB drive infect my PC with malware if I don't allow any autorun.inf to run?
USB sticks dropped in the car park works for low value targets, too.
Nov
22
answered Strong Cryptography in PCI PA-DSS
Oct
10
comment Mitigate timing attack threat against password recovery page
Send the mail in the background instead, e.g. with Hangfire, Azure WebJobs or some other background process.
Aug
15
comment Have computer criminals been known to exploit easily-edited websites like Wikipedia to embed malicious scripts?
AAISP are well worth any extra cost!
Jul
28
comment How can common users defend against the StageFright vulnerability?
If you have Cyanogenmod, you are either already patched or will be patched shortly.
Jul
27
awarded  Pundit
Jul
25
comment Why is my internal IP address (private) visible from the Internet?
@Schilcote In-browser VoIP or videoconferencing? But the way they've done this, with no way to disable it, is frightening.
Jul
25
revised Best practices for Tor use, in light of released NSA slides
Using the Tor Browser is important, kids!
Jul
24
awarded  Constituent
Jul
21
revised Best practices for Tor use, in light of released NSA slides
More minor updates; further reading section
Jul
17
awarded  Yearling