632 reputation
17
bio website
location Amsterdam, Netherlands
age
visits member for 1 year, 2 months
seen Jan 28 at 1:27

Big-picture IT security strategist and hands-on implementer for projects large and small. UNIX guru since 1994.


Feb
5
awarded  Yearling
Nov
15
comment What is setuid based script root spoofing?
I don't think "bamboozled" means what you think it means
Nov
15
comment Why can SSL certificates not be free of charge?
Your question shows no prior research. "Cryptic numbers" are you kidding? Downvoting.
Nov
15
comment Why can SSL certificates not be free of charge?
They can be free of charge. See startssl.com or cacert.org (I have no affiliation with either)
Nov
15
comment Determining false positives when scanning for live hosts with Nmap
If you want to find out which IP addresses have a real switched-on machine associated with them, you need to investigate at Layer 2, which is the OSI layer where those associations actually take place. If you don't know this, you are not qualified to be doing a security assessment.
Nov
15
answered What is a good way to be alerted of major security patches for software I use?
Nov
15
comment encrypted emails and keyservers
If you actually read "only who has your public key can decrypt it" somewhere, please provide the reference.
May
22
comment SSH says Authentication tried for XX with correct key but not from a permitted host
I think you're in the wrong place. This is not a general and widely-applicable question. It's a bug in your config, or a bug in the SSH daemon. Post your sshd_config and authorized_keys files (censored as necessary) to the OpenSSH (assuming that's what you're using) mailing list, and ask for help there.
May
16
comment Getting rid of a large quantity of paper
Who stands to lose if the destruction is not done? If it is the company that is refusing to reimburse the costs of destruction, the simple answer is to deliver the documents to their head of compliance with a suitably snarky cover letter.
May
7
revised Alternative to VPN
deleted 9 characters in body
May
7
answered Alternative to VPN
May
3
answered How to protect source code that resides on virtualbox web server which starts at boot?
Apr
27
answered Is ECDSA breakable by quantum computers?
Apr
27
answered “You have new mail” message
Apr
27
revised Advice on what to do after being hacked?
added 139 characters in body
Apr
27
revised Advice on what to do after being hacked?
added 139 characters in body
Apr
27
answered Advice on what to do after being hacked?
Apr
24
comment How to identify the Java program that is maliciously accessing my web site from many client addresses?
I have tried all kinds of responses. They have no effect on the behavior of the client, as far as I can tell. It doesn't follow redirects, doesn't fetch page requisites, or anything like that.
Apr
24
awarded  Student
Apr
24
comment How to identify the Java program that is maliciously accessing my web site from many client addresses?
@lserni No it's not. The request contains a Host header with the name of the site. Good question though.