Bruce Ediger

2,252 reputation

1914

bio	website	stratigery.com
	location	Denver, CO
	age	52
visits	member for	2 years, 2 months
	seen	10 hours ago
stats	profile views	71

	2,252 reputation	bio	website	stratigery.com	visits	member for	2 years, 2 months
1914 badges		location	Denver, CO		seen	10 hours ago

summary answers questions tags badges favorites bounties reputation activity

111 Actions

suggestions reviews revisions comments badges posts accepts all

May 10	awarded	Good Answer
Mar 31	answered	Is it ok to cut some digits from the front-face of a credit/debit card?
Mar 24	awarded	Yearling
Mar 18	comment	Concrete figures on password cracking in the wild Why leak the password DB if you're not going to crack the passwords - I don't think you can safely try to guess motives on that sort of thing any more. We've seen enough Anonymous and just plain random things (like the leaked credit reports last week) for me to believe that imputing a motive makes sense.
Mar 7	awarded	Nice Answer
Mar 6	answered	What is the most security benefit of a clean desk policy?
Mar 6	awarded	Good Answer
Mar 3	answered	Can a virus infect source code files with dangerous data?
Feb 17	comment	Need advice on linux server being hacked That crontab entry is bizarre and interesting. If you google for skdet, you find that it's a circa 2008 rootkit detector. skdet.tgz seems to constitute a rootkit, albeit one that has 2004 dates on all files. The readable parts look ancient, and like they don't work. I bet the crontab entry isn't the real rootkit, just some vestigial code left in the real rootkit.
Feb 13	answered	What applicability does the Halting Problem have to infosec?
Feb 6	comment	How do antiviruses scan for thousands of malware signatures in a short time? Are you sure about ignoring non-executable files? Given how often a Windows exploit pops up using a previously believed-to-be-un-executable file, and the lack of documentation about what extension goes to what executable, I'd think that every file would have to be scanned.
Jan 16	revised	How do you know a computer is not compromised when you first get it? Clean up a really poor sentence.
Jan 16	answered	How do you know a computer is not compromised when you first get it?
Jan 2	comment	Are older viruses removed from virus definition files? I suspect that the answer is "no, they're never removed", as there's no incentive for A-V companies to remove signatures of old viruses. The old viruses never change, so the signatures can just rest in peace. On the other hand, if you take out a signature too early, well, "Virus Bulletin" might ding you when you can't detect EICAR.COM or something really ancient, Lehigh, maybe.
Dec 21	awarded	Custodian
Dec 21	reviewed	Approve suggested edit on How can I explain SQL injection without technical jargon?
Dec 20	comment	How can I explain SQL injection without technical jargon? @Kevin - well, I believe this site has a pretty international audience. I've only written checks in the USA, I would guess that UK or European checks would work similarly, but I don't know personally. I haven't written many for some years. I mostly do payments on-line. So "back in the day" seems correct to me, as does "In the USA". Please accept my most humble apologies for any misapprehensions I might have promulgated. I only meant to give an analogy that might not apply anywhere outside the USA.
Dec 20	awarded	Nice Answer
Dec 20	comment	How can I explain SQL injection without technical jargon? @Kevin - I'm told that checks/cheques are pretty rarely used in the UK and maybe elsewhere in Europe. I very rarely write out a check these days, although I often do ACH, which doesn't require me to write much, if anything.
Dec 20	revised	Where can a virus or other malware “hide” on common PC and Mac hardware? Add a couple of links to presentations about PCI rootkit and ACPI BIOS rootkit.