27,135 reputation
22661
bio website
location Troy, NY
age 30
visits member for 1 year, 11 months
seen 1 hour ago

1h
reviewed No Action Needed Is it better to use a root password, or use 'sudo bash'?
1h
reviewed Close Is there a secret-sharing public-key-encryption-based service?
1d
reviewed Close Restrict a user to SSH authentication with a key
1d
reviewed Close Problem in downloading and browsing
1d
reviewed Close How to get MAC address via IP
1d
answered How were hackers able to alter the text of my pages without a form or querystring?
1d
comment pci compliance and temporary files
@mic.sca - good question. I think technically it probably wouldn't be, but I'm not sure that a lot of people consider that risk. It is at least slightly harder to access in a virtual memory file since it is more buried than if it is in a temp file, but technically it could still be compromised by dumping the virtual memory file.
1d
comment Drive-by download attacks: What can cause the file to be downloaded without interaction?
@begueradj - no worries. It really isn't necessary. I appreciate the thanks, but this wasn't all that hard of a question once I figured out what you were asking.
2d
revised So how much anonymity is effective?
added 1 character in body
2d
reviewed Leave Open Is JavaScript malware as dangerous as native viruses?
2d
reviewed Leave Open So how much anonymity is effective?
2d
answered Does it take longer to brute force a password starting with z than one starting with a?
2d
comment So how much anonymity is effective?
@BadSkillz - by itself, that won't actually do much for anonymity unless you are also disabling tracking cookies and other browser fingerprinting that could link your device across multiple access points. If I know you were at a Panera at 2 and the gym at 3 and the gas station at 4, there's a pretty good chance I can figure out who you are if I'm the government.
2d
answered So how much anonymity is effective?
Jul
28
answered Drive-by download attacks: What can cause the file to be downloaded without interaction?
Jul
28
revised Drive-by download attacks: What can cause the file to be downloaded without interaction?
cleaned up based on discussion with user in chat
Jul
28
comment Drive-by download attacks: What can cause the file to be downloaded without interaction?
Let us continue this discussion in chat if you have further clarifications needed. (BTW, like the anti-spam feature in your profile.)
Jul
28
comment Drive-by download attacks: What can cause the file to be downloaded without interaction?
At most they may click a button to do something else on the site other than download and infect their system, but it may occur with or without any participation on their part. If the user is trying to download something, it is no longer a drive by download by definition.
Jul
28
comment Drive-by download attacks: What can cause the file to be downloaded without interaction?
@begueradj - not all downloads are active clicks. They can be embedded content such as flash apps or movies or whatever other content. It could also be Javascript capable of executing a download operation without a click via some exploit. The key thing of ANY drive by download is that you are not intentionally trying to download ANYTHING. The term "drive by download" is a reference to "drive by shootings" where someone is just walking along minding their own business at gets gunned down by a passing car. Same thing for a drive by download, the victim is just a bystander.
Jul
28
comment Drive-by download attacks: What can cause the file to be downloaded without interaction?
I'll repeat what Graham Hill pointed out, but add to it a bit. This question makes absolutely no sense at all. In both cases described in the article, you are not trying to download anything. The first case is talking about a malformed advertisement (often full screen over the content you are trying to access) that results in execution where it fools the browser in to thinking the click was a download verification, the other uses the website loading itself without any click being necessary at all.