2,935 reputation
11216
bio website stratigery.com
location Denver, CO
age 53
visits member for 3 years, 9 months
seen Dec 11 at 22:10

Mar
7
awarded  Nice Answer
Mar
6
answered What is the most security benefit of a clean desk policy?
Mar
6
awarded  Good Answer
Mar
3
answered Can a virus infect source code files with dangerous data?
Feb
17
comment Need advice on linux server being hacked
That crontab entry is bizarre and interesting. If you google for skdet, you find that it's a circa 2008 rootkit detector. skdet.tgz seems to constitute a rootkit, albeit one that has 2004 dates on all files. The readable parts look ancient, and like they don't work. I bet the crontab entry isn't the real rootkit, just some vestigial code left in the real rootkit.
Feb
13
answered What applicability does the Halting Problem have to infosec?
Feb
6
comment How do antiviruses scan for thousands of malware signatures in a short time?
Are you sure about ignoring non-executable files? Given how often a Windows exploit pops up using a previously believed-to-be-un-executable file, and the lack of documentation about what extension goes to what executable, I'd think that every file would have to be scanned.
Jan
16
revised How do you know a computer is not compromised when you first get it?
Clean up a really poor sentence.
Jan
16
answered How do you know a computer is not compromised when you first get it?
Jan
2
comment Are older viruses removed from virus definition files?
I suspect that the answer is "no, they're never removed", as there's no incentive for A-V companies to remove signatures of old viruses. The old viruses never change, so the signatures can just rest in peace. On the other hand, if you take out a signature too early, well, "Virus Bulletin" might ding you when you can't detect EICAR.COM or something really ancient, Lehigh, maybe.
Dec
21
awarded  Custodian
Dec
21
reviewed Approve How can I explain SQL injection without technical jargon?
Dec
20
comment How can I explain SQL injection without technical jargon?
@Kevin - well, I believe this site has a pretty international audience. I've only written checks in the USA, I would guess that UK or European checks would work similarly, but I don't know personally. I haven't written many for some years. I mostly do payments on-line. So "back in the day" seems correct to me, as does "In the USA". Please accept my most humble apologies for any misapprehensions I might have promulgated. I only meant to give an analogy that might not apply anywhere outside the USA.
Dec
20
awarded  Nice Answer
Dec
20
comment How can I explain SQL injection without technical jargon?
@Kevin - I'm told that checks/cheques are pretty rarely used in the UK and maybe elsewhere in Europe. I very rarely write out a check these days, although I often do ACH, which doesn't require me to write much, if anything.
Dec
20
revised Where can a virus or other malware “hide” on common PC and Mac hardware?
Add a couple of links to presentations about PCI rootkit and ACPI BIOS rootkit.
Dec
20
awarded  Great Answer
Dec
20
answered How can I explain SQL injection without technical jargon?
Dec
16
answered Where can a virus or other malware “hide” on common PC and Mac hardware?
Dec
15
comment Lamp server sandbox for testing malicious php script
The difficulty with that is that calls to eval() can be arbitrarily obfuscated. If you don't discover and replace all calls to eval(), you can end up running the malicious code, instead of writing it to a file.