meta user
network profile
| bio | website | serverfault.com |
|---|---|---|
| location | Manchester, NH | |
| age | ||
| visits | member for | 10 months |
| seen | May 19 at 16:46 | |
| stats | profile views | 14 |
I enjoy long moonlit walks on the beach, nginx, and IPv6.
|
May 17 |
comment |
Is it a bad idea for a firewall to block ICMP? RFC 5927 section 6.2 notes that Source Quench has been removed from many operating systems since 2005 or before, based on its uselessness for congestion control and its potential to be used for a blind throughput-reduction attack. |
|
May 17 |
comment |
Is it a bad idea for a firewall to block ICMP? Source Quench has been formally deprecated (RFC 6633). And has hardly ever been seen on the Internet for decades. |
|
May 12 |
comment |
Failed PCI-DSS Compliance | Submitting Evidence Time to fire that hosting provider. If you have the expertise, move it in-house. |
|
May 12 |
comment |
Disk Erasing Security - Odd Number of Writes Use secure erase, but verify. I've seen drives out in the wild with firmware bugs that prevent secure erase from working properly. For instance, older WD Caviar Black 1TB disks would only erase about 2/3 of the disk, or would brick before completing the erase. In the latter case, physical destruction would be required. |
|
May 12 |
comment |
Does IPv6 without NAT allow my ISP to identify/monitor/limit the number of devices in my network? Since current best practice is to assign a minimum of a /56 per end customer, it's very unlikely you'll actually run into this situation. If you do, you should beat your ISP over the head with a copy of the RFC, printed on a steel bar... |
|
Feb 20 |
comment |
Dropbear SSH server use-after-free vulnerability Those appear reversed; it's OpenWrt that's in active development, while DD-WRT has stagnated. Though it may have been the other way round a year ago when you wrote this. The current release of OpenWrt, Attitude Adjustment, has dropbear 2012.55. |
|
Feb 10 |
answered | Proxy server and IP address blockade |
|
Feb 2 |
reviewed | Satisfactory How secure is Windows 8 email authentication? |
|
Feb 2 |
reviewed | Excellent Security tradeoffs of pathname-based MAC (e.g., TOMOYO, grsecurity, AppArmor, …) |
|
Feb 2 |
reviewed | Satisfactory Are man-in-the-middle attacks against p2p systems realistic? |
|
Feb 2 |
reviewed | Satisfactory Is it preferable to perform encryption using database functions or code? |
|
Feb 2 |
reviewed | Satisfactory Is it useful to determine the name of the server software while doing a penetration test? |
|
Feb 2 |
reviewed | Satisfactory How much should I care about the iOS/Android version when pentesting mobile app? |
|
Feb 2 |
reviewed | Satisfactory Do any DNS registrars support multi factor authentication? |
|
Feb 2 |
reviewed | Satisfactory Is it possible to boot into root's /bin/bash on a LUKS encrypted device? |
|
Feb 2 |
reviewed | Excellent Future proof encryption possible in theory? |
|
Feb 2 |
awarded | Custodian |
|
Feb 2 |
reviewed | Excellent What does a HTML filter need to do, to protect against SVG attacks? |
|
Jan 13 |
awarded | Talkative |
|
Jan 9 |
awarded | Critic |
