4,603 reputation
1327
bio website apsillers.github.io
location United States
age 27
visits member for 2 years, 8 months
seen 18 hours ago

"The problem, when solved, will be simple."

  Conway's Game of Life
  Click any cell to toggle

  Controls:
  Step! Random Noise
  Clear New Pattern
  View source


Mar
14
comment Does this CSS code expose if a message is read, and how long they have been reading it?
@KyleHale Could you clarify what kind of session you're talking about (e.g., TCP)? In particular, I don't see how the server knows when to close the session based on a navigation action in the client.
Mar
14
revised Does this CSS code expose if a message is read, and how long they have been reading it?
added 203 characters in body
Mar
13
comment Does this CSS code expose if a message is read, and how long they have been reading it?
@D.W. Also, I want to look into Connection: keep-alive and see how a server could possibly track the termination of the long-lived TCP connection, even after the HTTP request completes.
Mar
13
revised Does this CSS code expose if a message is read, and how long they have been reading it?
deleted 27 characters in body
Mar
13
comment Does this CSS code expose if a message is read, and how long they have been reading it?
@D.W. Nope, you are correct that this is 100% speculation. I emailed it to myself on Yahoo mail and didn't see any slow loading there either. I've slimmed the cruft, added an even more ridiculous theory (with caveats about how unlikely it is) and admitted the possibility that maybe this code doesn't actually do what the site says (maybe some other code used by the company does). Also, possibly time-tracking is a premium feature that doesn't apply to this tracking ID?
Mar
13
revised Does this CSS code expose if a message is read, and how long they have been reading it?
deleted 27 characters in body
Mar
13
awarded  Nice Answer
Mar
13
revised Does this CSS code expose if a message is read, and how long they have been reading it?
added 2 characters in body
Mar
13
revised Does this CSS code expose if a message is read, and how long they have been reading it?
added 123 characters in body
Mar
13
answered Does this CSS code expose if a message is read, and how long they have been reading it?
Mar
13
comment Is a self-signed SHA-1 certificate sufficient security for a company transmitting sensitive data?
I'll just add a question-test for the OP to this great answer: If a MITM attacker replaced your self-signed cert with an attacker-generated self-signed cert, how would you know? If your employees installed the real certificate as trusted, you'd know because the attacker's cert is not trusted. If you get a CA-signed cert, you'd know because the attacker's cert is not signed by a CA (or is signed for a different domain). If you don't do either of these things, there's no way to distinguish your real cert from any other.
Mar
5
awarded  Good Answer
Mar
5
revised Possibility to sniff HTTPS traffic on devices without installing a certificate
added 184 characters in body
Mar
4
awarded  Nice Answer
Mar
4
revised Possibility to sniff HTTPS traffic on devices without installing a certificate
added 387 characters in body
Mar
4
answered Possibility to sniff HTTPS traffic on devices without installing a certificate
Mar
3
comment What are the repercussions of a DDoS attack on a website?
For prevention: DDoS - Impossible to stop? and What techniques do advanced firewalls use to protect against DoS/DDoS? Also: How does CAPTCHA mitigate DDoS attacks?
Mar
3
comment What are the repercussions of a DDoS attack on a website?
You're asking quite a few questions here. I'm concerned that this may be too broad, but each of your individual questions (how to prevent DDoS? / how (well) do CDNs mitigate DDoS and how might they fail? / what is the scope of harm from a DDoS?) seems fine. I'd suggest limiting it to one question and asking the others separately.
Feb
27
comment Is it possible to take back the control from an MITM in progress?
I think listing defenses against every possible way an MITM attack can occur is probably too broad for a Stack Exchange answer. If you wanted to address one specific attack vector (like DNS poisoning) then that would probably be appropriately narrow. "Man in the Middle" describes a vulnerable state; the term does not imply how a system was put in that vulnerable state. Answers about practical defense measures will vary depending on the practical attack measures used to execute the attack.
Feb
27
comment Is it possible to take back the control from an MITM in progress?
There are several mechanisms that may be sufficient to mount a MITM attack: ARP poisoning, an eavesdropping ISP, DNS spoofing, etc. If you are only interested in DNS spoofing attacks, it may be helpful to make that more clear in the title and question body.