meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 7 months |
| seen | 14 mins ago | |
| stats | profile views | 155 |
|
1d |
comment |
How can I verify the identity of a US | UK -based person and prevent *fake identities* from being accepted? In the worst-case scenario (your account creation routine being hacked) you'll be inundated with fake accounts through one or two fraudster groups, if a substantial part of the benefit (of 10k to 100k) can be converted to cash quickly. |
|
1d |
comment |
How can I verify the identity of a US | UK -based person and prevent *fake identities* from being accepted? Makerofthings - you can assume that government-created IDs would be indistinguishable from real IDs. What is the likelihood of someone living under witness protection using your site? |
|
May 17 |
comment |
How to avoid scripts with hardcoded password? Matteo - another benefit is you can centralize audit of the credentials file. |
|
May 16 |
comment |
Security comparisons between two approaches: how to distinguish FUD from Substance? @schroeder - Meta in the sense that it discusses other Q&As and attaches labels like "muddied". What's more, it's too broad and unanswerable. |
|
May 16 |
comment |
Security comparisons between two approaches: how to distinguish FUD from Substance? This is a meta-question. |
|
May 10 |
reviewed | Reviewed File uploader: Does renaming protect from exploitation |
|
May 9 |
comment |
What is the best way to hand out passwords to a widely spread diverse employee base? mipnix, do you mind expanding your answer a bit to prevent link rot? |
|
May 8 |
comment |
Is writing shellcode still a valid skill to have/learn? ...meaning all the tricks of the trade are still valuable... |
|
May 8 |
comment |
Is writing shellcode still a valid skill to have/learn? Idiot programmers are still out there... |
|
May 8 |
comment |
Don't allow access to phpmyadmin page over the network? XAMPP Windows @ysj - put it into one of the configuration files; generally it is advisable to read the docs before going into web development. |
|
May 7 |
revised |
Alternative to VPN excised the incorrect text on port knocking, added explanatory stuff |
|
May 7 |
suggested | suggested edit on Alternative to VPN |
|
May 6 |
comment |
Filtering In Iran Actually, cutting off makes great sense. You detect dissenters and do not leave them enough bandwidth to communicate effectively... |
|
May 6 |
comment |
Safe to connect to external drive? @EricRath - NEVER ever use Firewire! |
|
May 6 |
comment |
Is it advisable to fully record terminal interaction for incident response? You must already be doing full audit of all actions on your production systems; simply logging terminal history is not going to work in isolation. |
|
May 6 |
comment |
VCS to manipulate returned trees to prevent leaks? d33tah, if there's stuff sensitive enough to consider watermarking, it is usually compartmentalized and access narrowed to the fewest number possible. |
|
May 6 |
comment |
VCS to manipulate returned trees to prevent leaks? You are trying to solve a personnel problem with technology. Moreover, you rely on them not being able to run the code through a simple formatter. If you can't find the leak you can always try decimation. |
|
May 6 |
comment |
What are the career paths in the (illegal) computer security field? Irrelevant to the question at hand. Drug dealing and white collar crime are quite different arenas. |
|
May 6 |
comment |
Safe to connect to external drive? For the sake of sanity of all us paranoid types, you can also buy a brand-new spring-clean USB 2.0 external drive and give it to the client. :) |
|
May 6 |
comment |
Safe to connect to external drive? Was thinking over a Clancy-thriller-worthy scenario when a USB-connected storage device transmutates into something completely different... like a USB keyboard - and sends a crafted key sequence to the OS. |
