Reputation
3,811
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
5 22 47
Newest
 Talkative
Impact
~121k people reached

1m
reviewed Close Where to save Keepass' file?
1m
reviewed Close Can I make a digital time capsule?
11h
comment Objectively, how effective are malware removal tools at detecting infections?
You have a dangerous hobby. Time to go professional before it's too late.
12h
comment What could eventually be effectively done to mitigate the risks of errors and backdoors in IT-security software?
The revision is still too wordy and bloated. You have to use scissors and cut all the bloat. Excessive verbiage is off-putting.
13h
comment SSH server: What's more secure, pub key auth or Google Authenticator time-based auth?
You should disclose that you are the CEO of a company offering a competing 2FA solution in this post, not in your profile. Downvoted.
13h
revised SSH server: What's more secure, pub key auth or Google Authenticator time-based auth?
added 393 characters in body
14h
comment Is OpenSSL generating Diffie-Hellman parameters that are safe for use in TLS or SSH servers?
Why do you discourage from something that is recommended to avoid LOGJAM?
15h
reviewed Leave Open Transmitted sensitive user data
15h
comment Transmitted sensitive user data
Please remember that regex-fu is very aptly named. One backslash less than needed and you fu the whole regex.
16h
reviewed Reject Diffie Hellman prime attributes
16h
reviewed Close Is cryptsetup luksFormat -y --cipher aes-xts-plain --key-size 512 /dev/sdax a insecure setup for luks
16h
reviewed Close Does using ssl matter if I am connected using a VPN?
16h
reviewed Close What is the layers of abstraction (Digital Forensics)?
16h
reviewed Leave Open Is there a way to use VirusTotal.com offline?
16h
reviewed Edit and Reopen Are password-guessing attacks a real threat?
16h
revised Are password-guessing attacks a real threat?
Retitled for clarity, nominating for re-opening, since there's an objective answer - Yes, password attacks are real even with Fail2Ban.
16h
comment Running SSH on a different port vs adding the port number to a password
The question stems from an incorrect premise, and an omission. First, don't leave SSH protected by passwords. Ever. Second, you fail to consider the notion of 'privileged' ports.
16h
revised Signal listening
added 247 characters in body
17h
comment How to set up a multi-developer environment with emphasis on source code security?
Related: stackoverflow.com/questions/28401926/prevent-other-git-authors Git needs signed commits and pre-receive hooks coupled with changes to the SSH .config
18h
comment Identify if pc is infected
You can't. Reinstall from scratch.