3,229 reputation
1822
bio website blog.bstpierre.org
location United States
age 39
visits member for 3 years, 2 months
seen Aug 12 at 3:27

Hey


Dec
28
comment Setting up a honeypot
@ryyst: Some ISPs may filter traffic so that ports 137-139 (and others) can't even reach you. I'd suggest running a "noisy" port scan on the ports you want to reach from a host on another network. Watch your logs when you run the scan -- if you don't see your scan, then the packets are probably getting filtered by your ISP. (Don't run a "stealth" scan -- these packets won't show up in your logs by design.)
Dec
27
answered How would you analyze an image to find out if there are scripts embedded in it?
Dec
27
revised Is Teredo in my router a back door?
spelling; embed image
Dec
26
answered How to exploit this SQL inection vulnerability?
Dec
26
revised static IV and random keys using aes-256-cbc
edited tags
Dec
26
comment Public wifi security protocols
@Jason: What you're talking about is called a man-in-the-middle ("MITM") attack. I'm not sure if IPsec is less vulnerable to MITM than SSL, but you might find it instructive to read about SSL in this question -- I think the answers by AviD and Tronic are instructive. For SSH, if an attacker pretends to be your VPS, you will get a message from your SSH client telling you that the attacker's key does not match your server's key -- i.e. you will be aware of the attack and you can drop the connection before sending any confidential data.
Dec
26
revised Does an established ssl connection mean a line is really secure
typos
Dec
26
answered Public wifi security protocols
Dec
25
revised Public wifi security protocols
formatting and typos
Dec
23
revised Is strip_tags() horribly unsafe?
add link
Dec
22
asked Using “canaries” to detect intrusion?
Dec
22
awarded  Electorate
Dec
22
comment Why would the browser present the certificate for an unknown outside site?
And: don't click through the warning! You may see this the first time each day because the address for the site you are trying to visit is not in the DNS cache. Refresh the page until you get to the right place. (Unfortunately, since these kind of DNS services don't follow standards, your browser/resolver may cache the response (for 10 minutes) so you may need to restart your browser and/or wait until the bogus response's TTL expires.)
Dec
21
answered How can you become a competent web application security expert without breaking the law?
Dec
21
revised Strange STP traffic in my network, possible MitM attack?
spelling
Dec
21
comment Finding security consultant for doing in-depth code review?
In my experience in development (not focusing on security issues), code review is hands-down more efficient than testing. It seems longer, but when you find a a bug in a code review, it's generally a straight line to a fix versus debugging to find the problem based on a test failure. Review also tends to be more complete than testing, and finding+fixing bugs before the product leaves the building is literally 100x cheaper than after they've been found by a customer. Security bugs probably have an even bigger multiplier.
Dec
21
awarded  Enthusiast
Dec
20
answered rsa certificate authorities
Dec
20
revised Multibyte character exploits - PHP/MySQL
deleted 16 characters in body; edited tags
Dec
20
answered How can I check wifi activity?