2,510 reputation
11115
bio website stratigery.com
location Denver, CO
age 53
visits member for 3 years, 1 month
seen Apr 3 at 23:27

Mar
24
awarded  Yearling
Feb
25
comment How big is the threat of Desktop Linux malware?
@curiousguy - great. Write your own explanation of why Linux has so much more malware than Windows. Oh, wait...
Feb
24
answered How big is the threat of Desktop Linux malware?
Feb
24
asked What attack requests “wp-admin” URLs without login cookies?
Nov
26
awarded  Popular Question
Jun
24
awarded  Good Answer
Jun
22
comment Are Linux vendor-supplied security updates enough for PCI Compliance?
Don't confuse "PCI DSS compliance" with "security".
Jun
14
comment Why is blog spam always written so badly?
+1 for mentioning the Herley paper. All of the explanations above assume huge amounts about spammers that can't often all be true.
May
10
awarded  Good Answer
Mar
31
answered Is it ok to cut some digits from the front-face of a credit/debit card?
Mar
24
awarded  Yearling
Mar
18
comment Concrete figures on password cracking in the wild
Why leak the password DB if you're not going to crack the passwords - I don't think you can safely try to guess motives on that sort of thing any more. We've seen enough Anonymous and just plain random things (like the leaked credit reports last week) for me to believe that imputing a motive makes sense.
Mar
7
awarded  Nice Answer
Mar
6
answered What is the most security benefit of a clean desk policy?
Mar
6
awarded  Good Answer
Mar
3
answered Can a virus infect source code files with dangerous data?
Feb
17
comment Need advice on linux server being hacked
That crontab entry is bizarre and interesting. If you google for skdet, you find that it's a circa 2008 rootkit detector. skdet.tgz seems to constitute a rootkit, albeit one that has 2004 dates on all files. The readable parts look ancient, and like they don't work. I bet the crontab entry isn't the real rootkit, just some vestigial code left in the real rootkit.
Feb
13
answered What applicability does the Halting Problem have to infosec?
Feb
6
comment How do antiviruses scan for thousands of malware signatures in a short time?
Are you sure about ignoring non-executable files? Given how often a Windows exploit pops up using a previously believed-to-be-un-executable file, and the lack of documentation about what extension goes to what executable, I'd think that every file would have to be scanned.
Jan
16
revised How do you know a computer is not compromised when you first get it?
Clean up a really poor sentence.