572 reputation
7
bio website
location Amsterdam, Netherlands
age
visits member for 3 months
seen 2 days ago
stats profile views 19

Big-picture IT security strategist and hands-on implementer for projects large and small. UNIX guru since 1994.


2d
comment SSH says Authentication tried for XX with correct key but not from a permitted host
I think you're in the wrong place. This is not a general and widely-applicable question. It's a bug in your config, or a bug in the SSH daemon. Post your sshd_config and authorized_keys files (censored as necessary) to the OpenSSH (assuming that's what you're using) mailing list, and ask for help there.
May
16
comment Getting rid of a large quantity of paper
Who stands to lose if the destruction is not done? If it is the company that is refusing to reimburse the costs of destruction, the simple answer is to deliver the documents to their head of compliance with a suitably snarky cover letter.
May
7
revised Alternative to VPN
deleted 9 characters in body
May
7
answered Alternative to VPN
May
3
answered How to protect source code that resides on virtualbox web server which starts at boot?
Apr
27
answered Is ECDSA breakable by quantum computers?
Apr
27
answered “You have new mail” message
Apr
27
revised Advice on what to do after being hacked?
added 139 characters in body
Apr
27
revised Advice on what to do after being hacked?
added 139 characters in body
Apr
27
answered Advice on what to do after being hacked?
Apr
24
comment How to identify the Java program that is maliciously accessing my web site from many client addresses?
I have tried all kinds of responses. They have no effect on the behavior of the client, as far as I can tell. It doesn't follow redirects, doesn't fetch page requisites, or anything like that.
Apr
24
awarded  Student
Apr
24
comment How to identify the Java program that is maliciously accessing my web site from many client addresses?
@lserni No it's not. The request contains a Host header with the name of the site. Good question though.
Apr
24
comment How to identify the Java program that is maliciously accessing my web site from many client addresses?
Sounds plausible, but I don't understand why it would be banging on my site for years, while the ~100 other sites I host have never seen this pattern of requests.
Apr
24
comment How to identify the Java program that is maliciously accessing my web site from many client addresses?
"The infected machines send these HTTP requests in order to get some information on random Web servers." Can you elaborate on this? What is the purpose of that behavior?
Apr
24
asked How to identify the Java program that is maliciously accessing my web site from many client addresses?
Apr
14
comment How to secure SSH such that multiple users can log in to one account?
man authorized_keys
Apr
14
comment How is “hacking” even possible if I “defend” properly?
What makes you think you can trust the computer you're sitting in front of, to administer a server?
Apr
8
awarded  Revival
Apr
6
revised Does Verizon Wireless LTE network have intrusion prevention capabilities?
added 6 characters in body