network profile
| bio | website | |
|---|---|---|
| location | Australia | |
| age | ||
| visits | member for | 7 months |
| seen | Apr 27 at 8:35 | |
| stats | profile views | 5 |
An IT security manager who still loves coding and problem solving. After over 20 years, still trying to master the craft of writing reliable, clear, concise and elegant code.
|
Apr 27 |
comment |
How to find out the IP address of email sender in Gmail But it still may not tell you anything. For example, some ISPs will make all email go via a proxy, so all messages from that ISP will have the same IP. Many ISPs recycle IP addresses, so each time you conect, you get a different IP address. |
|
Apr 27 |
answered | How can I circumvent the lack of Java updates? |
|
Apr 27 |
awarded | Commentator |
|
Apr 27 |
comment |
Can robots.txt for your face be made effective? BTW, not to mean I don't believe it is a problem. There is a real issue here, but not just due to google glasses. Already, our face is being photographed multiple times every time we go into public space. |
|
Apr 27 |
comment |
Can robots.txt for your face be made effective? Should be noted that robots.txt does not enforce anything. Polite web crawlers will honor it, but there is no requirement to do so. Likewise, polite people don't take your photo without asking. Polite people are not the problem. |
|
Apr 27 |
comment |
Is there any security threat with open WiFi connection? Yes, very high risk. If you have connected to any services not using https, vpn or ssh (i.e. encrypted), your credentials (passwords) have been sent plain text any any user on that wifi could see them. Update your passwords. |
|
Apr 18 |
comment |
How is “hacking” even possible if I “defend” properly? You are managing a risk. Risks cannot be eliminated, only mitigated so that the residual risk is less. As you do not have 100% control over ALL variables, you cannot ever be 100% sure that someone cannot find a weakness in your system. |
|
Apr 14 |
comment |
Finding spam sending scripts? You need to clarify what the risk is our attempting to mitigate. It is not clear what you mean by 'spam scripts' or why your worried about spam scripts and not other security threats. While what you are doing are reasonable things to do, they are not scalable, rely too much on human intervention and will likely consume too much time, resulting in things ending up on the wrong side of a cost benefit ratio. Try to articulate exactly what your risk concern is and we may be able to advise better. |
|
Apr 4 |
comment |
What technical reasons are there to have low maximum password lengths? OMG, the net is full of chimps. Just for the record, I am currently working on a project to remove 8 character limit on passwords for a client who has over 40,000 users and a lot of applications. Things are not as simple as many of you would like to think. Yes, the crypt() limit is the basic reason for the 8 character limit. Crypt was required to support legacy apps. The 8 char limit made sense when it was originally imposed (CPU, net, I/O speed). |
|
Mar 15 |
answered | Proper Linux user authentication through PAM aware applications |
|
Feb 28 |
comment |
How does Google Maps know where I am, when I'm using a VPN? I also suspect, google being google, they could be using a number of heuristics to 'guess' location. I have noticed google reporting incorrect location information when using a desktop with a wired connection. I'm in a rural location and google will often report me as being in the nearest large metropolitan location. My guess is that if you live in a major city, google's guesswork/voodoo will frequently be correct, but if your in a regional/remote locaiton, more often than not, it will be incorrect unless your using a device with geo-loc facilities. |
|
Feb 28 |
comment |
How does Google Maps know where I am, when I'm using a VPN? @Franko Glad you pointed this out. Have exactly the same situation and often have to explain to staff that when they are running the VPN client, it is only traffic going to our domain which is within the VPN tunnel. |
|
Feb 28 |
comment |
Can someone steal money from my bank account if they know my IBAN and personal details? Are you serious? That seems crazy - especially for Germany where there seems to be so much protection in other areas, especially wrt privacy etc. |
|
Feb 22 |
answered | SQL injection Are there any instances where a vulnerable url would not contain an 'equals' (=) symbol |
|
Feb 22 |
answered | What is better, an established framework or a homebrew solution? |
|
Feb 22 |
awarded | Critic |
|
Feb 22 |
answered | What is the point of hashing passwords? |
|
Feb 22 |
answered | What is a reasonable expiry for user authentication certificates? |
|
Feb 15 |
answered | How to deal with a person who gets easily fooled by internet and mail scams? |
|
Feb 7 |
answered | How do I know a piece of software only does what the author claims? |
