network profile
|
May 16 |
awarded | Yearling |
|
May 8 |
awarded | Editor |
|
May 8 |
revised |
Is it possible for a hacker to download a php file without executing it first? Corrected the function name, then elaborated on SFTP because of the 6-character minimum. |
|
May 8 |
suggested | suggested edit on Is it possible for a hacker to download a php file without executing it first? |
|
Apr 8 |
comment |
Preventing a spoofing man in the middle attack? @griffin All good cryptography assumes that absolutely everything between the sender and the recipient is potentially hostile and untrustworthy by definition as a starting position, and then works from there to establish a secure connection despite all of that. |
|
Apr 8 |
comment |
Preventing a spoofing man in the middle attack? @Griffin You don't control the handshake; both sides already already know what they'll agree on. Unless you can convince the client to trust your spoofed certificate (which would involve convincing them to install your own CA certificate as trusted, then using that to sign a fake certificate generated on the router) you won't be able to alter the data stream without immediately being detected. |
|
Apr 8 |
comment |
Preventing a spoofing man in the middle attack? @Griffin Spoofing signed certificates is distinctly nontrivial. |
|
Apr 8 |
comment |
Preventing a spoofing man in the middle attack? @KyleM of course if you do, all bets are off... |
|
Mar 26 |
comment |
How safe is FireFTP? If you're going to use SFTP exclusively, look into setting up your accounts with a public/private key exchange rather than a password. It's safer, and ssh in general already supports locking a private key with a passphrase. |
|
Mar 25 |
awarded | Scholar |
|
Mar 25 |
accepted | I managed to capture a botnet control host, what do I do with it? |
|
Mar 20 |
comment |
XKCD #936: Short complex password, or long dictionary passphrase? @nullnvoid Thing is, the subset of the 10,000 words you know is different from the set that I know. They're a Venn diagram -- and given that we're both frequenting this site, there's probably more overlap than with two randomly picked people -- but they're not the same. In the scenario we're working with here the attacker is assumed not to know anything about the specific target. |
|
Mar 9 |
comment |
Should I change the default SSH port on linux servers? There are reasons that "security by obscurity" is considered a rude word. |
|
Mar 9 |
comment |
Should I change the default SSH port on linux servers? Also, software like fail2ban will help secure your system much better than arbitrarily changing port numbers will. |
|
Feb 28 |
awarded | Popular Question |
|
Feb 28 |
awarded | Good Question |
|
Feb 28 |
awarded | Custodian |
|
Feb 28 |
reviewed | Reviewed tshark - dump the data section |
|
Feb 28 |
comment |
I managed to capture a botnet control host, what do I do with it? I locked down the server the moment I became aware of the botnet and fail2ban is getting an exercise blacklisting the IP address of every bot that tries to contact the server -- looks like it's peaking out at about 14K bots. |
|
Feb 28 |
awarded | Nice Question |
