806 reputation
29
bio website boardspace.net
location
age
visits member for 2 years, 8 months
seen 41 mins ago

I develop games for fun.


Sep
6
answered How likely/possible is it that the NSA have broken common encryption techniques such as SSL/TLS?
Sep
1
answered How does Windows know which part of memory is “intended to hold data only”?
Aug
31
comment Scan Source Code for Potential Viruses
right on the money. malicious source code is unlikely to have a module called "malware".
Aug
30
comment Would IT Security professionel people notice a backdoor in Windows 7 or SBS 2011 implemented by Microsoft?
Another thought; microsoft (and many other vendors) do not even need a back door. We've been trained to give them the keys to the front door. Anytime one of the vendors who routinely load updates on my machines wants to do something either for me or to me, I am powerless to resist - unless I'm willing to risk that certified malware won't get me if I do.
Aug
30
comment Would IT Security professionel people notice a backdoor in Windows 7 or SBS 2011 implemented by Microsoft?
So windows machines are perfectly secure then; I guess I was wrong about everything, and all those security patches are just for show. Meanwhile, back in reality, windows OS security is swiss cheese. Microsoft has never been held liable for uncounted losses due to security breaches. No one knows what all those patches do or what doors have been deliberately or only inadvertantly left open.
Aug
29
answered Would IT Security professionel people notice a backdoor in Windows 7 or SBS 2011 implemented by Microsoft?
Aug
20
awarded  Benefactor
Aug
20
comment Can malware come in any format?
no known way. One famous example was an exploit of widely used jpeg reading code.
Aug
18
comment Cheating or service disruption by altering client-side code
I'm not in the "nothing is better than something" camp. Short of completely abandoning smart clients, something is better than nothing.
Aug
18
awarded  Yearling
Aug
18
awarded  Nice Question
Aug
18
comment Cheating or service disruption by altering client-side code
then how would you recommend detecting that a client is attempting to tamper? I'm soliciting better ideas.
Aug
15
comment email on hosting company's site hacked?
I think changing browsers is a plausible suggestion for any problem involving use of a browser. IE used to be a seething pit of security flaws, and all browsers have their share of unexplained behaviors. If your browser is compromised, misconfigured, or just plain broken, changing it will frequently "fix" the problem.
Aug
15
answered Cheating or service disruption by altering client-side code
Aug
14
revised Cheating or service disruption by altering client-side code
change the headline to "cheating" instead of "command injection"
Aug
14
comment Cheating or service disruption by altering client-side code
Thanks, you've added a lengthy exposition of what I took as a given, and omitted in the interests of keeping the posting brief. The ideas in the "mitigation" link you provided are the kind of thing I was looking for.
Aug
14
comment Cheating or service disruption by altering client-side code
Absolutely not. The server interprets the command stream as a private stream of requests, and as noted in the original post, it's very careful about invalid requests. This is about the client attempting to inject extra requests. Imagine in a shooter game the client adding extra bullets.
Aug
14
comment Cheating or service disruption by altering client-side code
Not forms, discreet commands in a continuous TCP steam
Aug
14
comment Cheating or service disruption by altering client-side code
"Command Injection" is adding his own items to the communications stream from client to server.
Aug
13
awarded  Promoter