171 reputation
6
bio website wernercd.com
location Delaware
age 35
visits member for 4 years
seen Nov 11 at 2:33

Data Analyst Programmer (Primarily C#)


Aug
13
comment Can we trust antivirus software?
@user2813274 CYA can be one of many reasons. Expertise, accountability, vettability, regulations, etc... many reasons outside of finger pointing to consider when purchasing security software (not just AV). Trust also helps keep providers in check. Look at all the blowback from NSA related issues. What company is going to voluntarily install a backdoor when they can lose face and customers?
Jul
29
comment Does clicking lead to DoS attack?
@Bergi The question is: Can simple clicks lead to DoS? Specifically, me clicking real fast (paraphrased). Of course the bandwidth available will affect how many clicks lead to a "DoS". A self-hosted website, behind a home connection will need much fewer clicks than something hosted on a high-availability AWS... This question made me think of the slashdot effect because that's basically what it is, death by a million clicks.
Jul
29
comment Does clicking lead to DoS attack?
see related: en.wikipedia.org/wiki/Slashdot_effect - lots of honest traffic (flash mob) causing a website to go down. Just people clicking to view the site. Not that far of a stretch of many people clicking a link once... to one person clicking many times.
May
22
comment Sending passwords to someone remotely
Use ietf.org/rfc/rfc1149.txt
May
15
comment Why are certificates limited in time?
2038 Problem? ... is often referred to as the Unix Millennium Bug. Great... we just has the Y2K problem. Then the end of the Mayan Calendar. Now this? Guess I'll start stacking up on rice and freeze dried potatoes because I have no faith that systems will be updated by then.
Feb
27
comment Is Adblock (Plus) a security risk?
@Superbest Well... if it isn't an American Companies, then it is some other random company. .. ... I jest I jest. But seriously, I would say the same for most companies - and would say the same if Comcast or Google told me to stop using ABP. You have to raise an eyebrow when a company that profits off of advertisements tells you to stop using an ad blocker.
Feb
27
comment Is Adblock (Plus) a security risk?
Who do you trust more? ABP (which is under constant scrutiny and would be steam rolled if it replaced mybank.com with something else) or Some Random German Company? COULD an addon be used for Evil Purposes? Of course... but without proof it's just blind accusations and FUD.
Jul
12
comment How important is it to protect demo data by HTTPS enabled server?
startssl.com = free ssl cert. Only takes time, and can only be used with 1 sub-domain per certificate (but you can make many certificates... or pay for a wildcard)
Jun
27
comment What anti-keylogging programs can you use when using a public PCs
+1 @Rook My first thoughts exactly. Android and 2-part authentication (Where available).
Jun
21
comment Hosting an “IP Rental” address. Is this common, safe?
Wouldn't the better option be to avoid the possibility in the first place? Sure, be a mole if you are already in the situation and need to CYA on the way out... but why put yourself into the position in the first place? Unless the payout is worth the risk, and you can live with the worst case scenario: Roommate who thinks you sure do have a perdy mouth.
Nov
15
comment Webmail host knows my password
Having gone through something similar during an Intranet Site rollout, being able to recover the password doesn't mean its stored plain-text. It DOES mean that in the best case scenario, it's Encrypted/Decrypted and not one-way-hashed. stackoverflow.com/a/4948393/409025 . Still not a good thing that Joe Blow can read you back your password.
Oct
3
comment Invalid users trying to log in to my server
I'd also add "SSH disallowed from internet" or "SSH only allowed from certain IP's". I only allow SSH to my home router from my internal IPs and my work IP address.
Oct
2
comment Does Username + Password + Pin improve login security?
Mathematically a longer password (A-Za-z0-9... possibly special characters) is going to be stronger than a PIN (0-9 x4).
Jan
26
comment What should I do when my boss asks me to fabricate audit log data?
@user606723 "Get the request in writing, THEN refuse to do it." Lying to a liar doesn't make you honest. I get the impression that it's a "Put it in writing to Cover My Ass and I'll do it" then don't do it... not exactly keeping the high ground on that route.
Sep
25
comment Why do law-abiding citizens need strong security?
That must mean the President is doing a LOT of illegal things... look at all the security he has.
Dec
26
comment Verify Mac firmware is not hacked…how to do?
Sorry... Didn't realize I needed to include sarcasm tags. Poking fun at the mac is safe myth and all. I'll include sarcasm tags next time, pinkie swear :)
Dec
22
comment Verify Mac firmware is not hacked…how to do?
That's simple... everyone knows Macs can't be hacked or get virus', so it must be you reading things wrong.