2,935 reputation
11216
bio website stratigery.com
location Denver, CO
age 53
visits member for 3 years, 8 months
seen Nov 25 at 15:02

Dec
12
answered I think my server is under attack, what can I do to stop it?
Dec
5
revised A computing environment that saves no data
Better usage so wording is not so redundant.
Dec
4
answered A computing environment that saves no data
Nov
19
comment How do you explain the necessity of “nuke it from orbit” to management and users?
Good answer, KDEx: security is an economic good, with a cost and a value. My own thought is that the X% of malware is probably wildly overestimated, leading the the "nuke it from orbit" habit, but I've only really dealt with Solaris and Linux malware. Windows malware certainly sounds weirder and more persistent.
Nov
15
comment Determining how my Wordpress website was compromised
Why so skittish about details? Clearly, someone has figured these things out, and clearly they get used in the wild. Why bother concealing the details, if they make your explanation less clear, and more confusing?
Nov
15
comment Determining how my Wordpress website was compromised
Dear Mr Dali: I love your painting "Geopoliticus Child Watches the Birth of the New Man".
Nov
15
comment Determining how my Wordpress website was compromised
I'd be interested in how it got hacked. I see a lot of (apparently) WordPress vulnerability scanning in my access_log file, but I can't lure anyone into sending me their payloads, no matter what weak plugin I try to emulate. Actually, I think that a good proportion of the scanning for WordPress vulnerabilities just won't work - the skiddies involved got duped into running bad code.
Nov
9
comment Is there a website or free downloadable program to identify and remove malware from an ISO file?
Can malware infest an image file? I mean, beside naming an executable on Windows NudeJenniferLopez.jpg.exe and praying someoe is dumb enough to click it, does any image file format have enough executable or interperable parts to carry malware?
Oct
31
comment Example of a backdoor submitted to an open source project?
+1 for vaguely menacing vagueness! Thanx!
Oct
31
comment Example of a backdoor submitted to an open source project?
Thanks for the OpenBSD IPSEC stack link. I vaguely remember that. Did anything come out of that allegation? I Googled for a while, and found a bunch of denials, but nothing definitive.
Oct
31
awarded  Enlightened
Oct
31
awarded  Nice Answer
Oct
30
comment Parabolic Denial Of Service — Would it work?
@November - the clearest explanation of multicast I found: www4.ncsu.edu/~rhee/clas/csc495j/ip-multicast-part1.pdf As Jeff Ferland notes, the routers have to be in on the multicast, so if you're not on the same subnet, you can't use multicast to amplify even further.
Oct
30
revised Parabolic Denial Of Service — Would it work?
Add a couple of links to Cloudflare blog posts about DNS amplification.
Oct
29
revised Example of a backdoor submitted to an open source project?
Add update about sourceforge mirror with backdoored version of phpMyAdmin source.
Oct
29
answered Example of a backdoor submitted to an open source project?
Oct
26
revised Repudiation in Copyright Infringement (BitTorrent)
Make my point specific to the USA.
Oct
26
comment Repudiation in Copyright Infringement (BitTorrent)
"Laws do not persuade just because they threaten." The Roman orator Seneca said that sometime before 65 AD. I don't think the human situation has changed much.
Oct
26
comment Repudiation in Copyright Infringement (BitTorrent)
@Null: Open Wifi is not negligence in the USA right now: eff.org/deeplinks/2012/07/…
Oct
26
answered Repudiation in Copyright Infringement (BitTorrent)