meta user
network profile
|
Apr 7 |
awarded | Nice Question |
|
Mar 1 |
comment |
To DMZ, or not to DMZ Your first step in this assignment should be to find out what a DMZ actually is. Once you know what is, you can then decided if you need it. And dont listen to lynks, there are plenty of reasons to use a DMZ.. For starters, blocking inbound connections from devices in the DMZ to your LAN. Any time you expose something to the Interwebs (in this case the devices in the DMZ), you're putting them at risk. If you leave those devices in your LAN and simply set up "NAT filters" like he suggested, you're potentially putting your whole LAN at risk the second one of those NAT'd machines gets compromised |
|
Jan 21 |
comment |
How unlikely is it that a Google Doc link is guessed? Does anyone know? -- if it's an "open" document will Google index it for their search engine? |
|
Oct 18 |
comment |
Bank forces me to use six character alphanumeric password Ok... what about a rogue employee with access to the database? Or if they have offsite tape archiving and a tape gets lost or stolen in transit? Or, heaven forbid, a human error occurs? In this business, it only takes one "big if" to be completely screwed. |
|
Oct 18 |
comment |
Bank forces me to use six character alphanumeric password Call them and say you've lost your password for your online account and see if they can tell you what it is. That'll let you know if they're storing it in cleartext. Either way, though, I would move to a different bank. Even if they are encrypted, if someone where to hack in and get a copy of their User database, it would literally take only 1-2 seconds with a gpu cracker to crack all the passwords, making your user account accessible to the attacker. He could then transfer all of the money out of your account. |
|
Jul 17 |
comment |
Block all BotNets and TOR addresses from accessing our site Do you honestly think that only bad guys use Tor? |
|
Jul 6 |
revised |
MITM: tools for intercepting and modifying traffic? added 330 characters in body |
|
Jun 28 |
comment |
How is mail automatically sent from my account? @Curiousguy I never said that I didn't think it was legitimate. In fact, I've only ever used this for legitimate purposes. I'm sorry that you misunderstood the intentions of my post. |
|
Jun 27 |
answered | MITM: tools for intercepting and modifying traffic? |
|
Jun 27 |
comment |
How is mail automatically sent from my account? That's why I put "I believe" because wasn't exactly sure how that part of the mail system works. Point being, though, is that very first sentence, which is still true. It's very easy to set up a SMTP mail server that sends email out from yourname@yourdomain.com. |
|
Jun 27 |
answered | How is mail automatically sent from my account? |
|
Jun 15 |
comment |
Tool to grab sensitive information from command lines On FreeBSD, doing ps auxf as non administrative user showed me all running processes, their full paths, and their arguments. |
|
Jun 14 |
awarded | Yearling |
|
Jun 6 |
comment |
Detect what is running on an open port? It could be some proprietary service or functionality built specifically for that camera. Have you tried checking the documentation? |
|
May 8 |
comment |
Danger of Path Traversal Attacks Overlooked this one. Plus the attacker can look at the known_hosts file to see which servers have been accessed with a particular user and either use that users private key that they've stolen or the password that they cracked from /etc/shadow to access these other remote systems. |
|
May 8 |
comment |
Danger of Path Traversal Attacks If the server is only accessible from the VPN, isn't it safe to assume then that if the attacker is gathering this information he's in the VPN as well? |
|
May 8 |
answered | Danger of Path Traversal Attacks |
|
Apr 27 |
comment |
Preferred UAC configuration in Enterprises that use Login scripts to map drives Also, I used to map drives through login scripts before I switched it over to GPO and I would use net use S: \\Server\Shared and it would work fine with UAC on the default setting. |
|
Apr 27 |
comment |
Preferred UAC configuration in Enterprises that use Login scripts to map drives Well, in this specific case wouldn't it be preferable to use Group Policy to map the drives anyway? User Configuration > Preferences > Windows Settings > Drive Maps |
|
Apr 27 |
comment |
Cleaning a virus by mounting the infected hard disk on another machine? Although the other answers offer good insight, I have to agree with tdammers. Once a system has been compromised, you can never safely trust it, 100%. In these cases I always back up what needs to be saved (and be careful with what you're backing up... for example, if you copy over the entire home folder, you have a good chance that you're backing up the virus as well) and then start from a fresh installation of your OS. |
