meta user
network profile
| bio | website | beautyofpeople.com |
|---|---|---|
| location | Alphen aan Den Rijn, The Netherlands | |
| age | 52 | |
| visits | member for | 7 months |
| seen | 3 hours ago | |
| stats | profile views | 5 |
Software developer at TimeTell BV, The Netherlands
|
20h |
comment |
Best source(s) for security related news? Yeah, I should clean 'm out... |
|
May 17 |
comment |
What can an attacker do with Bluetooth and how should it be mitigated? BlueTooth security is explained in Episode 280 of Security Now grc.com/sn/past/2010.htm I'm not going to copy/paste from their transcript to a SE answer. As far as I remember from that episode you can take some measures but Bluetooth is crackable. Also, Bluetooth implementations differ because the specs are ambiguous, which leaves room for exploits (Maybe after all the years of its implementation, developers have converged to a practical standard, I don't know) |
|
May 17 |
comment |
Finding spam sending scripts? Are you afraid that you have 'email spam sending scripts' on your server? If your server is compromised you're wasting time. Reformat and reinstall from backup. That's the only sensible solution, you'll never be able to track down and erase the malware to a point where you can guarantee that your server is clean again. |
|
May 10 |
comment |
Overwriting hard drive to securely delete a file? Your question is not entire clear and this makes answering it too broad: Did you install software or did you just copy some (data) files onto the machine, or created them? Please edit. |
|
May 10 |
comment |
Intel How Strong is Your Password page, good advice? @Johnny Yes they do. Google 'Mat Honan' |
|
May 7 |
comment |
How to encrypt data on the server? +1 for thinking outside the box ("encryption shouldn't be your focus") |
|
Apr 15 |
comment |
ISO27000 implementation - Where do you get the standardization material? You'd have to buy them, but when I was involved in this two years ago I managed to find illegal copies just by Googling. |
|
Apr 12 |
comment |
Is social-engineering an actual threat Another recent example: Mat Honan wired.com/gadgetlab/2012/08/apple-amazon-mat-honan-hacking |
|
Apr 12 |
comment |
How can I identify / discover files hidden with ADS? LNS: ntsecurity.nu/toolbox/lns |
|
Mar 21 |
comment |
How do I safely inspect a suspicious email attachment? +1 This is exactly the answer to the OPs original question. Any mail app that lets you see the raw ASCII of the message is safe to look at the message and any attachments, whether it's an on-line (GMail) or a standalone app (Outlook etc). From there you can cut-n-paste to wherever you want for further investigation. |
|
Feb 26 |
comment |
How to determine what type of encoding/encryption has been used? If it is MD5 you could try any of the MD5 cracking websites like md5decrypter.co.uk. None of these are fast or guaranteed to give a result. Google for "md5 cracking" to find more. That will also give you an extendeed list at stottmeister.com/blog/2009/04/14/how-to-crack-md5-passwords |
|
Feb 25 |
comment |
Why do we not trust an SSL certificate that expired recently? @Michael Right - if driving 10 km/h over the 100 km/h speed limit is waved away then everybody drives 110 and complains about the ticket they get at 113 because they 'were only 3 over'. The same inflation applies. |
|
Feb 15 |
comment |
Why are passwords limited to 16 characters? "hashing a large amount of data can cause significant resource consumption" Calculating a (any) hash hardly takes CPUs. Hashes were designed for that. |
|
Feb 15 |
comment |
Detect Bitcoin Mining CPU/GPU usage is unreliable. If they have a screensaver running BOINC the load is always 100% |
|
Feb 13 |
comment |
How to use USB-Stick instead of passphrase? Yep. Yubikey mimics a USB keyboard, that opens a lot of possibilities. |
|
Feb 13 |
comment |
How does Near Field Communication (NFC) compare to RFID technologies? Looking for a functional primer Some thoughts on NFC security: Security Now ep. 372 grc.com/securitynow.htm, but IIRC it does not address your specific questions |
|
Feb 11 |
comment |
Next steps after webmail account was compromised "Change the passwords of any accounts which use the same password as his webmail account." Yes, but don't make the mistake to give them all a same password again. That behaviour has to be rooted out. |
|
Feb 11 |
comment |
Our logs showing a lot of SSH brute force attacks originating on Port 11 Can you be more specific about "SSH brute force attacks originating from port 11"? Do you have example log entries, are there patterns in the attacks, etc. That may help to fingerprint anything 'familiair'. |
|
Nov 19 |
comment |
Protect database resources from fake data inputs via web forms If you have that many forms and "captcha is manually intensive" that suggests that one individual can be constantly inputting (different) forms, right? In that case, maybe your server software can present one captcha per session/hour/every x forms coming from that one IP address? |
|
Nov 19 |
comment |
Protect database resources from fake data inputs via web forms The question still is not clear to me. Do you have both 10000 forms and each form accepting 10000-100000 records at a time? |
