Reputation
3,804
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 10 29
Impact
~273k people reached

Oct
5
revised Tools needed to setup a paranoid remote backup server
edited body
Sep
15
awarded  Necromancer
Jun
22
awarded  Yearling
Feb
9
answered How can I find the process that is trying to use smtp to send email?
Feb
3
comment Most secure data storage?
I want to +1 for the vicious dogs, but then you have to figure out how to store all that dog food...
Feb
2
revised How to harden an iPhone/Android app so its tough to reverse-engineer it?
formatting
Feb
1
comment Does the method of Internet connection affect the security of your the network?
Similar to: security.stackexchange.com/q/9008/2980
Jan
26
comment Best way to test my home network from the outside
@TateHansen: Good point. That is why I recommended the step in the third paragraph: open a port on your home router and verify that you can see the port as open so that you know it was filtered by the router and not somewhere between the scanner and the router.
Jan
24
comment Best way to test my home network from the outside
@snowape: I don't know for sure, but FWIW I've heard that Amazon doesn't permit scans from their VPS. Check the TOS.
Jan
24
comment Best way to test my home network from the outside
@snowape: Sorry for the ambiguity: "ISP" is providing the pipe to your home, "VPS" is providing a cloud server. Two different, but related, issues. (1) Check the TOS on your VPS. When I checked, Linode didn't care about running scans -- though I'm pretty sure they'd care if they started getting abuse complaints. (2) Check with your home ISP to see if a scan is going to generate an abuse complaint. Probably not, but it doesn't hurt to ask and it can avoid getting hit with a complaint at your VPS account. I've never had a problem with infrequent scans even without notification on either side.
Jan
24
comment Best way to test my home network from the outside
@lszi: That would work, but I generally prefer to avoid disturbing the SUT so that I don't introduce a change that invalidates the test. Setting up dhcpd to hand out a single IP address isn't that hard.
Jan
24
answered Best way to test my home network from the outside
Jan
24
revised Best way to test my home network from the outside
spelling
Jan
21
comment Protecting emails in your database
Are you asking about customer email addresses or the actual content of email messages?
Jan
19
comment Bypassing XSS filters
See also: security.stackexchange.com/questions/164/new-xss-cheatsheet
Jan
16
comment Can one get infected through visiting a site with a PHP script on it and if yes, how?
+1 for comparing PHP to rats as an indirect plague vector!
Jan
16
revised encode der with openssl
fix formatting, grammar
Jan
10
comment Is a password protected PDF file safe for bank statement attachments?
@lszi: In the US you might start with the OTS (Office of Thrift Supervision), but I doubt you'd get anywhere. Easier to switch banks (which is not easy -- I don't say this lightly).
Jan
9
answered How do I choose whether to trust a particular website?
Jan
6
comment How many authentication factors are there?
"Somewhere you are" could also require being physically present in front of a given system.