Reputation
7,723
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
11 30
Newest
 Nice Answer
Impact
~262k people reached

Sep
1
answered Are there any known cases were antivirus software have deliberately ignored malware?
Aug
31
answered Definition of security incident
Aug
31
comment Site hack with email phishing scam
@WhiteWinterWolf, that's why I started the answer with "If you can't find the entry point of the hackers..." , which is what the original question asked about.
Aug
31
awarded  Nice Answer
Aug
28
answered Site hack with email phishing scam
Aug
12
answered Can the FBI or government agencies decrypt my hardrive and/or force me to give them the password?
Aug
8
awarded  Yearling
Jul
27
awarded  Constituent
Jul
23
comment Internet Explorer - Advanced Properties for Trusted Root Certificates
To confirm this, click the Advanced button and deselect everything except one easily recognizable checkbox, such as Microsoft Time Stamping, then click OK. At the top of the dialog, change the "Intended Purpose" pulldown to "<Advanced Purposes>". You'll see only a few Microsoft certificates that have this attribute. In other words, it's a very poorly labeled "filter" mechanism.
Jul
23
awarded  Caucus
Jul
2
reviewed Leave Open Make really personalised wordlist file
Jul
1
answered Securely storing bank account details in database
Jun
17
revised Do I need to secure a computer from physical attacks when attackers can already harm in many other ways?
added 1362 characters in body
Jun
16
answered Do I need to secure a computer from physical attacks when attackers can already harm in many other ways?
Jun
8
comment Hiding process from Task Manager
@Pacerier, there are multiple ways to achieve the outcome. Legitimate software uses "hooking", as described above. Malicious software might use the hooking APIs, or it may simply search modify the binary value of the current API's entry point, and roll their own hook. The advantage of using the published API is that it's supported on all platforms. The disadvantage to the malware author of calling the official API is that calling the CBT hooks is detectable as potentially suspicious behavior.
Jun
8
revised Hiding process from Task Manager
Added link to hooking document.
Jun
4
comment How to disable a trail camera with a laser
You could defeat it with high tech measures, such as ringing the outside of your window with superbright IR LEDs. This would blind the camera such that it couldn't see your activities. You could also defeat it with low tech measures, such as curtains. Or you could walk over there and ask him to get rid of it.
Jun
3
comment Symmetric key generation
See en.wikipedia.org/wiki/… for the math behind combining two sources of entropy. Knowing the value of Y doesn't influence your knowledge of X. H(X|Y)=H(X).
Jun
3
answered Enabling feature to log in as soon as right password is typed (without pressing enter)
May
26
comment Why do coffee shops not use WPA/WPA2? Would it solve many problems if they did?
@Pacerier, coffeeshop WiFi is freely given away for promotional reasons to anyone who is physically in the shop, paying money for their products. The only reason for the encryption is to deny access to non-paying customers (such as patrons of neighboring establishments), and the way they choose to deny access is to not provide the password to anyone who is not physically present.