network profile
| bio | website | stratigery.com |
|---|---|---|
| location | Denver, CO | |
| age | 52 | |
| visits | member for | 2 years, 2 months |
| seen | 2 days ago | |
| stats | profile views | 71 |
|
Oct 5 |
comment |
What are the likely effects of increased government spending on “Cyber Weapons” on the software industry? @Ramhound: See "Farewell Dossier" and en.wikipedia.org/wiki/Siberian_pipeline_sabotage . By 1988 it was well known that the Soviets were acquiring VAXes, so why wouldn't some TLA do that? |
|
Oct 5 |
comment |
What are the likely effects of increased government spending on “Cyber Weapons” on the software industry? @Ramhound: getting a "Confidential" or even a "Secret" isn't that hard, but what about Q-clearances (the Dept of Energy atom bomb knowledge clearances)? What about the clearances above Top Secret? If "Olympic Games" was for real, it was classified well above Top Secret. |
|
Oct 3 |
comment |
What are the likely effects of increased government spending on “Cyber Weapons” on the software industry? I heard a rumor around 1988 that the NSA (or some TLA) did exactly what you suggest: "They've got big notebooks full of bugs, for every operating system, even VMS!" And that the TLA in question used those bugs (didn't call them vulns back then) to do nefarious things to the commies. |
|
Oct 3 |
answered | What are the likely effects of increased government spending on “Cyber Weapons” on the software industry? |
|
Oct 2 |
answered | How a malware executes remote payload |
|
Sep 28 |
comment |
Are anti-virus companies companies regularly committing software piracy? Good. I upvoted. |
|
Sep 28 |
comment |
Are anti-virus companies companies regularly committing software piracy? We're not discussing detecting malware, we're discussing possession of a huge amount of copies of software, possibly in contravention of international treaties, like ACTA. In the USA since 1976, and elsewhere since the Berne Convention was ratified, any intellectual property is automatically copyrighted by the creator. It strikes me that most of the posters here are arguing good intent, but most copyright law does not allow the consideration of intent or state of mind. Mere possession is illegal. |
|
Sep 28 |
comment |
Are anti-virus companies companies regularly committing software piracy? I personally can go with this, but in the USA fair use is only something that can be discovered through lititgation. You have to go to trial to find out. Without a trial, you're skirting legality at best. Further, fair use is something you plead AFTER YOU ADMIT TO COPYRIGHT VIOLATION. It's not usable up front. |
|
Sep 28 |
comment |
Are anti-virus companies companies regularly committing software piracy? You guys need to look into the "intent" issue. In newer laws in the USA, "intent" (or "mens rea") is often very explicitly LEFT OUT of consideration. Just doing something, copying a file or even possession, is enough to make you guilty. The DMCA does this sort of thing, as do a lot of the more recent copyright laws. |
|
Sep 27 |
revised |
Ways to monitor someone's internet traffic Add note about traffic analysis. |
|
Sep 27 |
comment |
Ways to monitor someone's internet traffic Ultimately, I don't know, but unless the VPN makes some effort to confuse traffic analysis, stuff can leak. See: crypto.com/papers/jbug-Usenix06-final.pdf The "jitterbug" outlined in that paper could be used by the backdoor to sneak info out. |
|
Sep 27 |
answered | Ways to monitor someone's internet traffic |
|
Sep 12 |
comment |
How helpful is rkhunter? Not debating the need for a risk calculation. But I don't believe that rkhunter does all that much: the only realy root kit I ever got hit with still wouldn't be detected. I am arguing against making an absolute requirement for linux out of a "best practice" for windows installations. |
|
Sep 12 |
comment |
How helpful is rkhunter? Is that a real suggestion, or a "motherhood and apple pie" suggestion, like early PCI DSS insistence on a "malware checker" on every computer, which was slightly ridiculous for say, Paymentech's Stratus front ends. |
|
Sep 12 |
comment |
How helpful is rkhunter? Suppose the distro is Arch, with a rolllig release and a preference for "cutting edge". It will be harder for someone to write a root kit, as Arch installation continually roll kernel versions and directory structures. |
|
Sep 11 |
comment |
How helpful is rkhunter? I commend you for recognizing that security is an economic good, with a value, and a price, and an opportunity cost. rkhunter appears to be linux (or maybe linux & BSD & unix) specific. Without knowing what distro the asker uses, the price and opportunity cost are impossible to calculate. |
|
Aug 29 |
comment |
What does WEP access point show during aircrack-ng attack? I'm just doing this to see how things work, not to run an Access Point. To crack WEP, the attacker runs "aireplay-ng" in the ARP Replay mode. So the attacker is not entirely passive, is he/she? Can I see the results of the ARP replays? |
|
Aug 27 |
awarded | Student |
|
Aug 27 |
asked | What does WEP access point show during aircrack-ng attack? |
|
Aug 22 |
awarded | Commentator |
