517 reputation
28
bio website none
location
age
visits member for 3 years, 1 month
seen yesterday

Apr
15
comment How paranoid should the average user be about heartbleed?
To back Mixologic up, I rekeyed all of my certificates and they still have the original Issued date.
Jul
17
comment To DMZ, or not to DMZ
Seriously? Here's a DMZ for dummies link that you could find really useful. en.wikipedia.org/wiki/DMZ_(computing)
Jun
14
awarded  Yearling
Apr
7
awarded  Nice Question
Mar
1
comment To DMZ, or not to DMZ
Your first step in this assignment should be to find out what a DMZ actually is. Once you know what is, you can then decided if you need it. And dont listen to lynks, there are plenty of reasons to use a DMZ.. For starters, blocking inbound connections from devices in the DMZ to your LAN. Any time you expose something to the Interwebs (in this case the devices in the DMZ), you're putting them at risk. If you leave those devices in your LAN and simply set up "NAT filters" like he suggested, you're potentially putting your whole LAN at risk the second one of those NAT'd machines gets compromised
Jan
21
comment How unlikely is it that a Google Doc link is guessed?
Does anyone know? -- if it's an "open" document will Google index it for their search engine?
Oct
18
comment Bank forces me to use six character alphanumeric password
Ok... what about a rogue employee with access to the database? Or if they have offsite tape archiving and a tape gets lost or stolen in transit? Or, heaven forbid, a human error occurs? In this business, it only takes one "big if" to be completely screwed.
Oct
18
comment Bank forces me to use six character alphanumeric password
Call them and say you've lost your password for your online account and see if they can tell you what it is. That'll let you know if they're storing it in cleartext. Either way, though, I would move to a different bank. Even if they are encrypted, if someone where to hack in and get a copy of their User database, it would literally take only 1-2 seconds with a gpu cracker to crack all the passwords, making your user account accessible to the attacker. He could then transfer all of the money out of your account.
Jul
17
comment Block all BotNets and TOR addresses from accessing our site
Do you honestly think that only bad guys use Tor?
Jul
6
revised MITM: tools for intercepting and modifying traffic?
added 330 characters in body
Jun
28
comment How is mail automatically sent from my account?
@Curiousguy I never said that I didn't think it was legitimate. In fact, I've only ever used this for legitimate purposes. I'm sorry that you misunderstood the intentions of my post.
Jun
27
answered MITM: tools for intercepting and modifying traffic?
Jun
27
comment How is mail automatically sent from my account?
That's why I put "I believe" because wasn't exactly sure how that part of the mail system works. Point being, though, is that very first sentence, which is still true. It's very easy to set up a SMTP mail server that sends email out from yourname@yourdomain.com.
Jun
27
answered How is mail automatically sent from my account?
Jun
15
comment Tool to grab sensitive information from command lines
On FreeBSD, doing ps auxf as non administrative user showed me all running processes, their full paths, and their arguments.
Jun
14
awarded  Yearling
Jun
6
comment Detect what is running on an open port?
It could be some proprietary service or functionality built specifically for that camera. Have you tried checking the documentation?
May
8
comment Danger of Path Traversal Attacks
Overlooked this one. Plus the attacker can look at the known_hosts file to see which servers have been accessed with a particular user and either use that users private key that they've stolen or the password that they cracked from /etc/shadow to access these other remote systems.
May
8
comment Danger of Path Traversal Attacks
If the server is only accessible from the VPN, isn't it safe to assume then that if the attacker is gathering this information he's in the VPN as well?
May
8
answered Danger of Path Traversal Attacks