580 reputation
612
bio website
location
age
visits member for 2 years, 2 months
seen Dec 16 at 15:45

Dec
16
comment Can a neighbour who installed my router access it?
infeasible to pose as a neighbor for every not-so-interesting target just to build such infrastructure, agreed. it'd be relatively easier for such an attacker to get them infected in mass before they get to the distributors to be sold, which as we all may know it may be not just paranoia unfortunately. anyway I was just happy to see the broader context in your answer. interesting quote btw. a third way of course to social-engineer all neighbors to do so, but well, let's not get into that here.
Dec
16
comment Can a neighbour who installed my router access it?
depends on the attacker and its motives. for example, an attacker may want to deploy these tampered firmwares just to build an infrastructure for occasional mass-data-collection or mediator in creating zombie-machines, noone needs to be of particular interest personally, only as input source for a comparative analysis or whatever use.
Dec
16
comment Can a neighbour who installed my router access it?
Should I be concerned? how rational is it from the same information you gave us to suspect your neighbour to be malicious? everything is relative I suppose. you and the neighbour have a huge gap of IT capability so in theory the neighbour may would feel safe and confident that you wouldn't notice the difference if [s]he were attempt to trick you. would your neighbour need your data? for profit? for fun? you may want to make up some fake but beliveable information that makes her/him take a move. if the neighbour tries to use it for his/her advantage you can be sure about being monitored.
Dec
16
comment Can a neighbour who installed my router access it?
custom firmware with fake linksys logo and backdoors - the only answer so far that hints on these things.
Jul
7
comment Can robots.txt for your face be made effective?
@Damon additionally to the recognition, it is one thing to take a snapshot of the world's streets, and an entirely different thing to have continous, real-time omnipresent live broadcast of everything you can. If snapshots threaten privacy then you now have that per each frame per second, also indoors.
Jul
7
comment Can robots.txt for your face be made effective?
@Damon beside the good point, I see a problem with that. A public place like 'the street' was not expected to provide a way of systematic mass monitoring, when privacy protection traditions were introduced. So going 'public' on the street today is different than it was in Thomas Jefferson'‌​s time. The implicit privacy protections associated with 'public' relied on human-based abilities, not machine-based infrastructures.
Jul
3
comment What is the technical rationale behind intermediary email servers?
@schroeder good point but the intended security aspect is whether a system could be set up so no unexpected intermediary servers take place in the exchange. for that one should know the rationale. Aiming for a better question I added that.
Jun
26
comment Can robots.txt for your face be made effective?
http:// motherboard.vice.com / read / our-brains-will-be-hacked-tracked-and-data-mined
Feb
27
comment How to fight browser fingerprinting?
I think I should link the 2010 evercookie. Its goal is to identify a client even after they've removed standard cookies, Flash cookies (Local Shared Objects or LSOs), and others.
Dec
4
comment Couldn't websites that want to track our activity just store the data in the DOM?
aren't websites cached? that would give a slightly greater expiration to 'DOM-stored tracking information' than just memory.
Nov
18
comment Can robots.txt for your face be made effective?
@Adnan why of course! I'm having a hard time choosing here because both answers are quite different; can't help I like the lesser upvoted one.
Nov
10
comment How can PayPal spoof emails so easily to say it comes from someone else?
Why does clients, including webclient-based mails, allow clicking links on emails at all? Browsers go a big way to notify me that 'this website is dangerous', make sure 'you are aware of the risks when adding a certification exception', or that 'any downloaded file is potentially dangerous to open or execute in any form'. What's wrong with email clients?
Jun
16
comment How likely/possible is it that the NSA have broken common encryption techniques such as SSL/TLS?
thank you very much for the links! off-note (meta): afaik, links are "discouraged" only when no other information is given in an answer/quetsion, but when the information is provided on-site, as citation sources they are encouraged. or at least this is how I thought and what makes sense to me. either way, thank you very much!
Jun
16
comment How likely/possible is it that the NSA have broken common encryption techniques such as SSL/TLS?
could you please add some links/citations to "know" (quantum computers, efficient breaking, etc.)
Jun
9
comment Can robots.txt for your face be made effective?
under the lights of current news, a friend asked: is the PR ISM program named after the all-seeing-eye at the top of the pyramid? What to answer this.
Apr
27
comment Can robots.txt for your face be made effective?
@TimX There is a difference between passively letting people choose whether to be polite or not, and actively encouraging them to be polite. PLEASE KEEP OFF THE GRASS
Apr
20
comment Can robots.txt for your face be made effective?
@Adnan I share your concern and if you could provide some details, I made this meta question in order to identify what makes it open-ended and how improve the question meta.security.stackexchange.com/questions/1237/…
Oct
22
comment How much can I trust Tor?
I'm by no means advanced in security, but, while may be better than your average Win-dows box, "Linux" (which one?) does not equals "safe". There are OSes that try harder to be "secure at default", ie. openbsd.org/security.html