Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
4
Newest
 Scholar
Impact
~815 people reached

  • 0 posts edited
  • 0 helpful flags
  • 7 votes cast
Jan
9
comment Can other customers on shared hosting see requests from/to my site?
I would like to add here, that you should not use predictable urls. There are tools like uniscan and many others that try to locate via dictionary attacks the most propable urls your site has. From an inside job this would be even easier as the user might have much better access rights from the localhost or same C class network.
Jan
9
comment File system history on USB drives
That is true. It is a lesson well learned, I am just trying to make a point here for the company to change its security policy. Blame is not an issue here, I just want to have some professional technical opinion to show that things like this happen and if something critical happens in the future that it is not always possible to pinpoint the culprit if the logging procedures are not appropriately implemented.
Jan
9
awarded  Scholar
Jan
9
accepted File system history on USB drives
Jan
9
comment File system history on USB drives
Answer accepted but please explain why - Is this because the usb drive itself has no logging information about the user? So the only way to find it is to pinpoint the exact pc and hope logging is enabled. Thank you very much.
Jan
9
comment What exploit types do I need to protect against in PHP?
RCE is always a problem. Custom code can solve RCE in many cases. i.e. If the users can upload images, files and post data, there must be some code to check for Embedded code in user files. Check timthumb vulnerability to see what's what, it's a very good example.
Jan
8
awarded  Student
Jan
8
comment File system history on USB drives
Yeap that sums it up pretty much Iszi. MP: I am trying to determine who deleted an important file from a USB disk because there was no backup at the time. I know the machine was win 7 for the stick was in the company all the time but not the specific computer.
Jan
8
answered What exploit types do I need to protect against in PHP?
Jan
8
awarded  Supporter
Jan
8
asked File system history on USB drives
Jan
8
awarded  Autobiographer