Reputation
510
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
2 12
Impact
~60k people reached

Feb
3
awarded  Popular Question
Dec
3
comment How should I set up emergency access to business-critical secrets in case I am “hit by a bus”?
This is what we did at the last two places I was the [only] "IT guy." We then put all those credentials and the like onto two USB sticks, encrypted them with a password the owner/CEO chose, and stuck one in the safe in his office, and the other in the fire-proof safe we used for our archival backups.
Nov
5
awarded  Popular Question
Oct
30
comment Can my IT department read my Google Hangouts chats while at work?
@Kristopher Sure, that's why I said the more applicable question was whether the IT department cares. I don't. Other people/jackass control freaks might.
Oct
20
comment Is there any way to safely examine the contents of a USB memory stick?
@Shane Oh, they got over a year's worth of warnings. And instructions on which networks they could plug potentially infected USB devices in. And company issued equipment so they wouldn't need to use the kiosk. Us IT folks were long fed up with cleaning up after and it and screaming for blood long before they got canned... but, eventually, one of the infections inconvenienced or embarrassed one of our C-levels, and that was that.
Oct
19
comment Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?
@Begueradj I was a moderator on ServerFault. While I was, no one bothered us enough to check things like that out of band.
Oct
19
comment Can a website identify me if I go in privacy mode with a different IP ? Or should I use a different computer?
(after suspicion of bad behaviors a user may perform) they analyse the way how you write. No, Stack Exchange does not do that, and tools moderators have access to via Stack Exchange are... not cutting edge, by any means. Yes, there are a number of ways to id a person based on their writing styles, but Stack Exchange does not have such an interface for their moderators.
Oct
19
comment Is there any way to safely examine the contents of a USB memory stick?
what measures do/can photo-printing kiosks take to guard against these kinds of attacks? None. They just let themselves get compromised. When I worked for a major A/V vendor, one of our offices was in the same building as a pharmacy, and we ended up having to fire a few employees for continuing to use the photo printer in the pharmacy, because the USB devices they plugged into the photo kiosks would be infected by dozens of different pieces of malware, and those would get onto our internal network when they plugged the USB device into their work machines.
Sep
16
comment Ipsec Native VPN on Windows 8 or 10
@user2641043 RADIUS (the NPS server role in Windows) is generally the go-to authentication method for network gear needing to authenticate Windows domain users or machines. I also know for a fact that it's possible to have an IPSec/L2TP VPN that doesn't ask for or use that "group name" field (as this is the type of VPN I've had access to at work for the last several jobs), but being a systems guy more than a network guy, I don't recall how to go about doing that (maybe that's one of the effects of using RADIUS authentication instead of authing against the network device, for all I know).
Sep
8
answered Ipsec Native VPN on Windows 8 or 10
Feb
14
answered Why would an attacker try to guess random email usernames on a small domain?
Feb
14
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
Oh, yes, there you go... that's what I was trying to get at. Not having perfect information security means that even the protection of perfect crypto won't perfectly protect your information, so even without breaking the crypto, some information can be gleaned. For some reason, I inferred an implication in your post that wasn't there about a properly implemented OTP equating to perfect information security.
Feb
14
accepted Is there any good (or less bad) way to handle a web portal or website with awful security?
Feb
12
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
@MSalters And there are already effective attacks (plural, two that I know of off the top of my head) against quantum entanglement (or at the very least, existing crypto systems using quantum entanglement). So that's not a solution either.
Nov
24
comment What makes it difficult to have a hardware antivirus?
The thing that makes computers so useful is that they are inherently instructable. We can program them to do a truly staggering number of things. Of course, the downside of that is that other people can program them to do things we don't want them to do too, and it's not like there's an easy way, or any universal way to decide which programs are bad, and which aren't. I mean, spyware's bad, right? Oh, except it's also used by employers to keep an eye on their employees, and parents to watch their kids online. Anything you do to make computers less programmable makes them less useful.
Nov
19
revised How does Bayesian poisoning work?
"The Effects of Different Bayesian oison Methods" Hmm... Bayesian oison. Sounds vaguely like some new kind of cuisine. Or particle physics.
Nov
19
suggested approved edit on How does Bayesian poisoning work?
Sep
12
revised Does Skype technology tap a user's machine to route other calls?
Enligsh touch-ups.
Sep
12
suggested approved edit on Does Skype technology tap a user's machine to route other calls?
Aug
24
awarded  Nice Answer