418 reputation
26
bio website
location
age
visits member for 2 years, 11 months
seen 22 hours ago

2d
comment Are antiviruses still useful?
Google Mac OS X viruses and you will come across some. Some of them are pretty horrifying too.
2d
comment Are antiviruses still useful?
Known sites have been known to spread viruses if they have something not properly sanitized. I think AV is a must.
Jul
27
comment Does cPanel store my login password as plaintext
@YordanPavlov It most likely sends it as plaintext. This is not a security issue as cPanel uses SSL (at least mine does). It also won't be stored on the server for more than an few seconds. Also as I understand it RAM is much harder to extract information from than something on the file system.
Jul
25
awarded  Yearling
Jul
24
revised Does cPanel store my login password as plaintext
added 155 characters in body
Jul
24
revised Does cPanel store my login password as plaintext
added 103 characters in body
Jul
24
answered Does cPanel store my login password as plaintext
Jul
24
comment Has personal computing security gotten better or worse in recent years?
While it is true that the amount of courageous/unaware users is probably higher on Windows, I would take it with a grain of salt since Windows has a market share far greater than OSX or Linux currently at 75% for just XP and 7 en.wikipedia.org/wiki/Usage_share_of_operating_systems. I would argue that percentage wise they are probably around the same. I've seen some Mac users do some pretty dumb stuff and a lot of them that think "I can't get a virus I'm on a Mac" and take that as I'm safe to do anything. I would say the viruses exist mainly because of the market share 75% vs 6.73%.
Jul
23
answered Has personal computing security gotten better or worse in recent years?
Jul
23
revised How is Google Chrome managing authentication to sites?
added 564 characters in body
Jul
23
comment How is Google Chrome managing authentication to sites?
You are correct, a computer with a root kit would be considered a compromised computer. I believe most AV programs try to deal with them by preventing their initial install if I am not mistaken. If you suspect your system has one the best option would be to reinstall the OS (on sure way) 2nd best would probably to use an alternative trusted medium. Could be as simple as a Linux Live CD with ClamAV.
Jul
23
answered How is Google Chrome managing authentication to sites?
Jul
23
comment How is Google Chrome managing authentication to sites?
I have deleted my answer earlier about threads and am trying to work a better one, but sites of the same domain use the same process (I would venture to guess threading) "We also have strategies to assign new tabs to existing processes if the total number of processes is too large, or if the user already has a process open navigated to that domain." - dev.chromium.org/developers/design-documents/…
Jul
14
comment Is it possible to track a missing brand new phone?
I would like to add if the package wasn't obviously tampered with when you signed if the website won't help you may be able to get something from UPS or FedEx both have a $100 insurance standard on any package that isn't delivered by one of their economy options (ones where the final delivery is by USPS, FedEx calls this SmartPost).
Jul
7
comment Generic error message for wrong password or username - is this really helpful?
See deathbycaptcha.com and scraping.pro/decaptcher-review. I do agree with limited login attempts.
Jul
7
comment Generic error message for wrong password or username - is this really helpful?
Recaptcha's are easily broken by a recaptcha solver. These sites often charge a low fee and have about 70% accuracy rate. Captchas (no reCaptcha) are even easier for a computer. Sometimes the computer is better at it than a human so it just provides an annoyance for your users.
Jul
2
revised How do I get a third-party-signed ssl client certificate?
deleted 850 characters in body
Jul
2
answered How do I get a third-party-signed ssl client certificate?
Jul
2
comment How do I get a third-party-signed ssl client certificate?
You may find StartCom to offer a more attractive fee for what you're doing vs a big company like Symantec. They say it costs about $2/cert. But, you will need to issue at least 1,000.
Jul
2
comment How do I get a third-party-signed ssl client certificate?
I looked into this once for a project. Those expensive managed PKIs are the only option if it must be signed by a CA. The government and others use their own CA that they have set up.