Reputation
413
Top tag
Next privilege 500 Rep.
Access review queues
Badges
5 13
Newest
 Yearling
Impact
~12k people reached

  • 0 posts edited
  • 0 helpful flags
  • 127 votes cast
Jan
12
comment How to tell users that they shouldn't disclose their password over the phone to our help desk?
"if a customer gives a password out to the helpdesk, that password must immediately be reset" is the best statement made so far in this entire post.
Jan
11
comment How to know whether a textfile has been edited or tampered with?
@philipp makes an excellent point. The first thing that sprang to my mind was "given the plain text XML and the binary, it won't take me long at all to reverse engineer the proprietary file format". Unless they are actually encrypting, it should be straightforward. At most, they will tack on some identifying header to each value (en.wikipedia.org/wiki/Type-length-value) I fear that you would have to contact each vendor individually and, even then, don't expect them to disclose details of their "secret sauce"; at most, i would expect vague reassurances of security, with no detail).
Jan
3
comment What are the security implications if someone got my home WiFi network password?
Why did this answer get 3 downvotes? I upped it as it seems a perfectly cromulent answer.
Dec
9
comment Why would a spammer try to get a (normal) image of mine?
Why would they bother sending email asking of a photo? Why not just rip some off from the web?
Dec
7
comment Let's Encrypt - can I rely on it?
I was thinking of using it for my own site(s).
Sep
28
comment Is there anything insecure about Google ReCaptcha?
An excellent point, maybe the OP will clarify this for us
Dec
18
comment How difficult is it to protect your storage from data recovery
You are wrong. There, that's you corrected. GIYF
Nov
11
comment Can I hide torrent details from my ISP?
Thanks. I expect that Google will be quickest (if a few ms DNS resolution time really matter, compared to page load time), but I shall also look again at OpenDNS whcih I used to use ... opendns.com/home-internet-security/opendns-ip-addresses
Nov
9
comment How can vending machines be hacked? And how can I prevent it?
+1 Thanks, @tylerl
Nov
9
comment How can vending machines be hacked? And how can I prevent it?
We will manufacture our own baord, but, yeah, currently an Atmel UC3. Maybe we had best remove all JTAG when designing the board. Thanks again for such a detailed feedback. Maybe I will fly you over here to try to crack one ;-)
Nov
9
comment How can vending machines be hacked? And how can I prevent it?
+1 both. @Polynomial, thank you very much for such a detailed analysis. You have given me much to worry about. I agree that a tube lock is easy to bypass and wonder if I should use somethign more robust (I am doing the s/w, but we will manufacture the h/w too). Once the door is open, I hope they woudl just take the cash, not look for a long term fleece (but...). Thanks for the tip about Ethernet; in V2 I want to use RJ45 or WiFi, and will encrypt all traffic. We don't intend to market to USA, only Asia, so don't need to worry about FCC.
Nov
8
comment Are there any benifits to backing up when you have all the original installation disks?
what, exactly, do you think that you are backing up? Back up only your data, if that is what you think that you need. Copy your data to USB stick, or even configure the programs to save tto USB stick; or a sepatrate partition which you can backup. But, be aware that you are unkikely to save program options. Again - what do you want to save/preservee/protect - maybe "backup" is not the best word ...
Nov
8
comment Encryption in an embeddded system
+1 @Polynomial You intrigued me so much that I asked a new quesstion. Please see security.stackexchange.com/questions/23755/…
Nov
7
comment Encryption in an embeddded system
+1 @DavidWachtfogel I take your point about wanting to prevent tampering, not reading - but can't I do both? I think I didn't explain well - the firmware is on a microprocessor in the machine and runs from there. If I need to load new f/w then, yes, it comes from the SD card, but is an encrypted exe & hard to hack (I hope). I take your point about auditing & there will be a lot ofback end s/w associated with the sales databse. Thansk for your feedback. What do you suggest, in concrete terms?
Nov
7
comment Encryption in an embeddded system
+1 @HenningKlevjer I don't expect more than 2 or 3 updates per year. teh f/w is new & likely to be buggy at first so an inital slew of f/w upates trailing off to none within the frist year ... ?
Nov
7
comment Seeking lightweight encryption - shareable between Delphi & C
+1 Thanks, but security theatre is enough in this case ;-)