meta user
network profile
| bio | website | |
|---|---|---|
| location | United Kingdom | |
| age | ||
| visits | member for | 4 months |
| seen | 2 hours ago | |
| stats | profile views | 37 |
I am not good at anything, just better than I was before.
|
May 17 |
awarded | Popular Question |
|
May 17 |
awarded | Good Question |
|
May 16 |
awarded | Nice Question |
|
May 16 |
accepted | Touch Screen Password Guessing by Fingerprint Trace |
|
May 16 |
comment |
Touch Screen Password Guessing by Fingerprint Trace True. Good point; I can see how this could escalate into a never ending story. +1. Thanks for that. |
|
May 16 |
comment |
Touch Screen Password Guessing by Fingerprint Trace Beautiful. Thank you. +1. |
|
May 16 |
comment |
Touch Screen Password Guessing by Fingerprint Trace @HSN. Good point, specially because it becomes more difficult to trace where the pattern starts from. Though I am not sure how much this would actually deter someone from guessing as there is no such a thing as account lockout for multiple failed attempts. |
|
May 16 |
asked | Touch Screen Password Guessing by Fingerprint Trace |
|
May 15 |
revised |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field grammar; format |
|
Apr 25 |
comment |
How safe is Tor from MITM/snooping attacks? +1 for the DefCon link. Hadn't watched it before. |
|
Apr 20 |
comment |
Why block outgoing network traffic with a firewall? @dadinck, but if the Admin account is compromised, would it not be possible for the attacker/virus/Trojan to change the Windows Firewall settings to allow the connection to the Command&Control? |
|
Apr 17 |
comment |
Authentication concept for sites served to another site Beautiful problem. In the third case scenario where the e-mail is sent via the URL: Are you using HTTPS? The problem with parameters (such as the e-mail address) being sent on the URL string via GET is that URLs usually get logged in several different places like logs, bookmarks and proxies. Is it not possible to send them over the body of a POST method? |
|
Apr 17 |
comment |
How can i deal with management who want 'Domain Admin' access? Good point from DodgyG below: "Is it within my remit to be worried by this". I would also ask myself: "Am I covered should the worst happen?". If the answer to the first question is 'yes', and for the second question is 'no', then you should definitely try and stop that. So, in view of self-preservation having a higher priority in my list, I would definitely base my decision upon the second question, but bearing in mind the first one too. As for the list, I think you can get some general ones off internet and drill down onto your own context/environment. |
|
Apr 15 |
comment |
Advanced techniques for detecting a proxy/getting original IP Forgive me for the naivety: I am not trying to challenge your answer, but in order to send your geo-location, would Firefox not require explicit authorization from the user? |
|
Apr 15 |
comment |
Security Assessment vs. Risk Analysis great point on the 'reproducible'. +1 |
|
Apr 15 |
comment |
how can you inject malicious code into an innocent-looking URL? Example was very useful indeed. +1 |
|
Mar 7 |
revised |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field correcting 'Does not exit' to 'Does not exiSt'. |
|
Mar 7 |
accepted | Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field |
|
Mar 7 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field @ray023 Can't tell you that, I am afraid. However this also happens to people doing their mistakes on their windows logon too. |
|
Mar 7 |
revised |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field correcting 'Does not exit' to 'Does not exiSt'. |
