1,835 reputation
411
bio website saconsumer.com
location San Antonio, TX USA
age
visits member for 2 years
seen 12 hours ago
stats profile views 51

Apr
27
awarded  Yearling
Apr
18
answered Must read resource about security management?
Apr
11
answered Is it possible that my home router is preventing my ARP poisoning attack?
Apr
5
comment Why are UNIX-like ACLs not a form of MAC
Manditory as in user is limited by external authority not in charge (discretionary).
Apr
2
comment How much are security tools audited?
Glad to see the Many Eyes meme put into context. Seems a healthy open source community with strong leadership and good commit attribution is the best hope overall. Lacking that why trust at all instead sandbox.
Apr
1
answered Is it safe to reinstall Windows without first decrypting the whole drive?
Mar
20
answered Is a VM only as secure as its host?
Mar
18
answered Does allowing everyone know when a server process was started pose a security risk?
Mar
18
comment Does allowing everyone know when a server process was started pose a security risk?
OK thanks I will address that way.
Mar
18
comment Does allowing everyone know when a server process was started pose a security risk?
Your title and question differ if I understand the question. Are you really asking about "everyone" or introspection within a process? Process isolation is an important security fundimental so allowing everyone access would be problematic. It seems you are asking about the code checking itself however. Can you clarify?
Mar
14
comment NIST hacked – best practices in a “Nuke it from orbit” often world
Actaully I thought the answer lived in the cloud and a multitude of working images (enough to get to a known good once the bad was understood). The question was about recovery in a new dangerous world but I understand the justification for closure and will attempt to avoid similar questions as this site is not appropiate for those questions. Sorry for the trouble...
Mar
14
asked NIST hacked – best practices in a “Nuke it from orbit” often world
Mar
13
comment Are smartphones at least as safe as “regular” computers for personal data?
+1 plus the recent FTC judgment against HTC theverge.com/2013/2/22/4017746/… suggests telcos and device maker may layer on vulnerabilities.
Feb
21
answered Mechanisms to detect service abuse in the cloud
Feb
20
comment Did I get hit by the recent Java exploit?
According to this article informationweek.com/security/attacks/… the attack was in several stages with JavaScript not Java method of hitting the site visitors so disabled Java would not be a protection.
Feb
19
answered bootp enabled by default on dhcp reduce security?
Feb
13
comment How to use USB-Stick instead of passphrase?
Google is rolling out a new solution with Yubikey which means they may soon be a standard solution set.
Feb
11
accepted February 7th 2013 Facebook integration error implications
Feb
11
awarded  Promoter
Feb
9
comment February 7th 2013 Facebook integration error implications
@CoryJ The event lasted at least 20 minutes. I went to a couple of sites chess.com and Huffington Post in my Google Chrome browser with Facebook open in another tab. Each time I opened the page it rendered for a second then immediately redirected to the Facebook error page. Complete denial of service each time of a dozen attempts. I have never used Facebook to log into any other site.