252 reputation
19
bio website 127.0.0.1
location Somewhere in the vicinity of Sol
age 41
visits member for 2 years, 2 months
seen May 14 at 13:47
stats profile views 76

Feb
28
comment Is it really better to use port 80 or 443 for outgoing traffic in order to bypass user firewall?
That is, unless there is a transparent proxy that can offer a certificate accepted silently by the browser, e.g. because of an issue like in some CAs recently or because someone forced a CA to be trusted within the AD ... it's not as far-fetched even for SSL as you make it look.
Feb
24
answered Tracking unique web site visits without logging IP addresses
Feb
15
awarded  Scholar
Feb
15
accepted Disabling authentication via DSA keys in OpenSSH?
Jan
21
comment Disabling authentication via DSA keys in OpenSSH?
Turns out this isn't true (the last statement). I have even made it impossible for the server to provide the DSA host key (truncated the file and made it immutable), yet I am able to log in. Thanks anyway for the cross-referenced answer and a +1.
Jan
17
awarded  Student
Jan
11
comment Disabling authentication via DSA keys in OpenSSH?
@Zoredache: so it's actually old, not new. Dang ...
Jan
11
comment Disabling authentication via DSA keys in OpenSSH?
Weird, this appears to be a new directive then. It's not in the version of man sshd_config I have. But thanks, appears there is a newer version that will have it. I looked for Dsa, DSA and dsa in the man page. +1 as this seems to be version-specific and clearly your answer would work would I have the "correct" version.
Jan
11
comment Disabling authentication via DSA keys in OpenSSH?
@Zoredache: because of en.wikipedia.org/wiki/Digital_Signature_Algorithm#Sensitivity ... but it doesn't really matter, does it? ;)
Jan
11
asked Disabling authentication via DSA keys in OpenSSH?
Jul
3
comment What are the security risks when using free Content delivery networks (CDNs)?
I think your question lacks a few important details. What is your exact use case, for example?
Apr
12
awarded  Autobiographer
Apr
3
comment I think I accidentally DoS'd a website. What should I do?
I agree with D.W.: DDoS != hacking ... one requires script kiddy skills, the other requires actual hacker skills.
Apr
3
comment Why is system32/ntoskrnl.exe blocking port 80?
What kernel are you using? It's likely that someone "impersonates" the NT kernel and that your real kernel has one of the common alternate names (such as ntkrnlpa.exe). Check whether ntoskrnl.exe on your system is even a native image or perhaps GUI/CUI.
Mar
2
awarded  Yearling
Oct
23
comment Why do botnets use IRC but not a web service for communication?
@bstpierre: you're certainly right. Still, most developers will prefer proven solutions and I reckon malware authors are no different in that respect (not to speak of script kiddies).
Mar
29
awarded  Citizen Patrol
Mar
29
awarded  Critic
Mar
12
comment How can Network Disconnect be implemented for RDP on a Windows system (2003/XP or later)?
@Iszi: even better then. The policies outlined in the MS article should help you solve the problem then. Good luck.
Mar
12
comment How can Network Disconnect be implemented for RDP on a Windows system (2003/XP or later)?
@Iszi: See the link below the image. However, this seems to be limited to XP onwards (including 2003, but without 2000). But this suggests that the settings may apply to 2000 as well.