Reputation
513
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
2 15
Newest
 Custodian
Impact
~27k people reached

Jan
30
comment How to deal with encryption virus?
It sounds as if someone installed one of these fake antivrus products....
Jan
8
comment Yahoo Account hacked, changed pw, spam still going out elsewhere?
it is actually spammers disguising themselves with your e-mail is generally the case, but not likely in this scenario, since all his contacts were spammed. Also that changing show images will stop this (in the 'general' case) assumes that the spammers take the trouble of checking email arrival with image tags, which is not very likely. Many of them don't care at all since spamming is cheap. If it works at all is because 'you' mailed to 'you' (and you had the rare spammer that checked arrival), that is not the case for the OP.
Jan
2
comment Are zip codes considered to be personal identifying information?
I'm surprised at the high number of upvotes to an answer that does not specifically address the question I was wondering, are zip codes alone considered personal identifying information?
Dec
18
comment How much can the police find about me with only my IP?
Probabilities assuming he really has the IP and the IP is static (both likely): This guy is bragging 99%. This guy can and is willing to pay for a DOS attack 1%. This guy can take legal action 0%.
Nov
4
comment Should I accept a self-signed certificate from my university?
Show them a list of cheap certificate issuers. The price of a cert is peanuts compared to their other expenses.
Oct
26
comment Add a supplementary credit transaction to improve online payment security?
Mmmm. No Google results for that French phrase either...
Oct
26
comment Add a supplementary credit transaction to improve online payment security?
BTW Within the framework of the reassurance of the online payments we proceeded to the following operations Weird language. What country is that company based in?
Oct
26
comment Add a supplementary credit transaction to improve online payment security?
I would not be very happy with a company that does bookings like that. Now my bookkeeper can't find the 73.31 payment in my records, and has to handle two transactions for each payment. And the tax auditor will ask me what all those 0.10 micropayments are doing in my transactions.
Oct
22
comment What security measures should be taken when running a Linux web server out of our office?
@Matthew Indeed ensure that the web server system is isolated from other office computers and networks. Isolation, isolation, isolation. Your whole starting point of 'running from our office' is a red flag, so it's good that you are asking here. Split your hardware and your software infrastructure. As pr- says in his/her answer, use a DMZ. The large Sony hacks were possible because they had all their networks connected. The isolation between networks made the 2015 Lastpass (suspected) breach a non-issue.
Oct
15
comment Privacy issues when mobile app has access to phone number and contacts
You are forgetting another issue: if an app has access to your contacts, it can also send this information back home (IIRC that is exactly what Whatsapp does). Therefore, you indeed cannot trust them.
Aug
21
comment What is the argument for the fairly prevalent “No more than n repeating characters” password rule?
These policies are implemented. Google maximum number repeating characters in password and you find several. And yes sometimes people go completely over the top setting policies, without apparent reason.
Aug
18
comment How would I encrypt something like this;
Related: softwarerecs.stackexchange.com/questions/17135/…
Jul
30
comment How can I keep Google from tracking me?
Did you install all these security measures after you have been running Google services unprotected, or are they present from day 1?
Jun
2
comment Random URL string: What kind of attack is this, and what can be done to stop it?
@levelonehuman If you find out more I suggest you write an asnwer to your own question (or at least make an edit to your question).
Jun
2
comment Random URL string: What kind of attack is this, and what can be done to stop it?
If you Google for inurl:"x(1)s" you'll see that there are obviously many systems using this pattern (I get 11 million hits). This would indicate it is not 'just' fuzz testing. Many of them lead to .aspx pages. I don't know enough of these, but maybe this is a starter for an answer from someone more knowledgeable.
Apr
30
comment Are these access.log entries successful wordpress login attempts?
One thing I imagine you could do is monitor new WP users - I can imagine someone getting in immediately creating a backup account. But this is no guaranteed way, of course, and will not work if you allow registrations. At least it's something, and there's probably already a mechanism or plugin for warning you.
Apr
30
comment How to check if my usb drives are vulnerable by BAD USB
Mark pointed out that only one chip type is vulnerable Only one? Can you edit and add a reference link?
Apr
30
comment How to check if my usb drives are vulnerable by BAD USB
Adam Caudill and Brandon Wilson demonstrated Bad USB at Derbycon and put their exploit kit up on GitHub. Maybe you can use that code or someone develop a tester based on it?
Apr
30
comment Are these access.log entries successful wordpress login attempts?
@user4668401 Any logins - how would you distinguish the valid ones from the succesful hacks?
Apr
16
comment Why is my Positive SSL certificate deemed insecure by Google Chrome?
Actually, there is nothing wrong with SHA-1 certificates yet. Google decided to pre-emptively build this into Chrome. It would've been the smart move to start these warnings for the same cutoff date as Microsoft does (1 January 2017), but these two are not the best of friends it seems.