1,486 reputation
1018
bio website None
location Netherlands
age 38
visits member for 4 years
seen 2 days ago

Just a guy with some linux experience.


May
22
comment Are duplicate SSH server host keys a problem?
It's also a good idea on cluster hosts, because if you don't every single ssh implementation I'm aware of will throw a fit if you try to connect to the shared IP when a different host has the master flag set...
May
22
comment Is there a backdoor in the hardware of our smartphones?
Out of curiosity, why would you think the Android is less 'safe' in this regard than the iPhone?
May
22
comment MySQL/CGI: password in C source file unsafe?
@pacerier Through any number of potential security vulnerabilities in poorly written website code, or even unpatched vulnerabilities in the daemon itself. Check on the usual security sites for "remote execution exploits" or similar keywords. I just had to yell at a customer over a breakin like that the other day.
May
20
comment Web Developer's responsibility for DDoS
Not a legal liability per se, more a professional obligation. Like I said, most of those were basically sound programming practice... although legally someone might decide to argye it's due diligence. IANAL though so don't take this as read.
May
20
answered Web Developer's responsibility for DDoS
May
16
awarded  Yearling
Apr
22
comment Why can't you work backwards with public key to decrypt a message?
The whole point of asymmetric key encryption is that the key that you use to encrypt can't be used to decrypt -- you need its counterpart.
Mar
19
answered Is it possible to perform a MITM attack with a smartphone?
Mar
6
comment Linux/ssh - Forensic question
@ott And none of them will record the history of what you did on another computer entirely. At most, .bash_history on A will have recorded that you started an SSH session to computer B. The shell can't look into the memory of a program it launches.
Feb
27
comment Superfish vs. Corporate MITM
@MikeDimmick And it's that latter bit that moves Superfish from "ethically and professionally dubious design decisions" to "criminally negligent", in my opinion...
Feb
26
comment Why is 'avast! Web/Mail Shield Root' listed as CA for google.com?
This is basically Superfish again.
Feb
10
comment Why can protocols on higher layers be left unchanged?
Which part of "layer" is unclear to you?
Dec
19
comment Detecting and preventing 'phone home' behavior in PDF files
Or, you know, use a PDF reader that doesn't support phone-home extensions.
Dec
4
comment How to avoid DDoS Attack
... That's a contender for the stupidest thing I'll hear all day and it's barely even morning yet.
Oct
29
comment Do bad passwords produce bad salted hashes?
-1 for use of the word "impossible" in a security/cryptography context.
Oct
15
awarded  Explainer
Oct
11
comment Why is using SSH key more secure than using passwords?
Also, even if it /would/ get forwarded, it'd be forwarded across an established and secured SSH connection.
Sep
5
comment What is 'TLS version intolerance'
@MSalters Hah. Ahaha. Ahahahahahahahahaha....
Aug
31
comment Is it possible to design a system where the client doesn't have to trust the server?
@queueoverflow Assuming that the phone call wasn't being monitored.
Aug
29
comment Can an HTTPS site be malicious or unsafe?
All it means is that if you contract malware from that site, it was actually coming from that site and not somewhere else, so at least you're sure of who to blame.