Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
1 6
Newest
 Pundit
Impact
0 people reached

  • 0 posts edited
  • 2 helpful flags
  • 37 votes cast
Aug
6
awarded  Pundit
Aug
5
comment Is this an attempted SQL injection?
@Roy: Indeed; however, SQL injection bugs in crappy PHP code are overwhelmingly more common than in other software, so attacks (at least in my experience) overwhelmingly target PHP scripts. The OP seems to think PHP is to blame: I will join you in suggesting that this is, however, a leap.
Aug
5
comment Is this an attempted SQL injection?
@Roy: That is not true. Bad PHP code is the vulnerable mechanism, but the payload ultimately goes to (say) MySQL in order to enact the exploit, and MySQL certainly has both functions.
Aug
4
comment What is the purpose of these weird non-spam emails?
I lolled at "Donall Sutherland"
Aug
4
comment What is the purpose of these weird non-spam emails?
@JamesT.Huggett: Because that is the purpose of the email? To see whether yours is in use. Replying is usually the worst thing you can do.
Jul
26
comment Why is my internal IP address (private) visible from the Internet?
This is not how NAT works. You're confusing concepts. -1
Jul
16
comment Is it good practice to send passwords in separate emails, and why?
Mike's also forgetting that each single email in isolation probably already is made up of multiple packets. That's the starting point, not the mitigation.
Jun
12
comment Why is Google still using a sha1 certificate on its own site when they are phasing them out in Chrome?
Perhaps you are not aware that Google is a huge company with lots of different departments? And that departments do not always properly talk to each other, let alone agree on things... It's not three guys in a garage running the whole shop any more...
May
29
comment Are consumer-grade routers any more or less vulnerable?
I'm disappointed that so many people get so disappointed when they are asked to pay a fair price in trade for some amazing software. Where did this expectation of "something for nothing" come from? That being said, KSplice is monumentally expensive, so refer to your own penultimate paragraph, I guess. :)
Apr
5
comment I accidentally published my SSH key passphrase, what to do?
@GuntramBlohm: The number of results is irrelevant; the point is that his password was transmitted to the search engine over the internet.
Mar
26
comment Should I be concerned if my website throws stack information?
@Steve: He should keep all services up-to-date. :( What a terrible way to "secure" his system. I thought he was supposed to be an expert?
Mar
26
comment Should I be concerned if my website throws stack information?
@SteveJessop: Why didn't he just change to a version that was not exploited o.O
Feb
4
comment I can't access websites that use HTTPS, instead getting the message “your connection is not private”!
People seriously need to stop moaning about "rights" when it's entirely illogical to do so.
Nov
7
comment How different should my passwords be?
@PyRulez: He told us in this one example sure. None of us here are attacking him with a password he's not actually using, though.
Nov
6
comment How different should my passwords be?
@Gilles: Alright then
Nov
6
comment How different should my passwords be?
"If the password for site B can be easily inferred from the password for site A, as in the method you suggest, then you fail at the damage containment." But can it? What are the odds that anyone will guess that such a scheme is in use, never mind what the scheme is? Granted, I can see how it's safer not to take the chance at all.
Oct
22
awarded  Critic
Oct
22
comment Is there anything preventing the NSA from becoming a root CA?
@Rory: security.stackexchange.com/editing-help#comment-formatting
Oct
16
comment How to explain to a customer that spamfilters don't catch everything
+1 for that last notion. I'd go back to the client with: "Sorry that one got through, but please bear in mind that 2,567,983 were blocked over the last six weeks; like anything human, spam prevention is imperfect and occasionally a computer cannot reasonably figure out when something is email that you want and when something is spam. Also please note that spam filters on the server are not virus checkers: that is the job of the AV on your computer and, as evidenced, that performed its job as expected. Please let me know if you have any further questions."
Oct
16
comment How to explain to a customer that spamfilters don't catch everything
@HotLicks: I've found my installation of SpamAssassin to be near 100% effective for the last six years or so. In both directions. Perhaps you've misconfigured your tools? Or perhaps your day-to-day emailing activity itself appears spammy in nature. :)