2,385 reputation
11019
bio website
location
age
visits member for 2 years, 11 months
seen yesterday

Feb
24
comment How big is the threat of Desktop Linux malware?
"Linux does not have the array of special cases that Windows has" Seriously? From device files to fifos, there are many things that you can open for reading or writing, that will behave differently and block at different times. Symlinks are hard links are special. /dev/tmp like devices are special and their semantic has changed. #! executables are special, they are not first class programs, as don't run directly (the interpreter replaces the script). Running a SETUID program is special; and SETUID programming is very tricking. Really nix semantics are awful from a security point of view!
Feb
23
reviewed Approve suggested edit on Keep receiving delivery failures for emails im not sending
Dec
24
awarded  Enlightened
Dec
24
awarded  Nice Answer
Nov
25
comment Why don’t SMTP servers just require all senders to be authenticated before accepting mail?
"SMTP" as in smtp.my.isp (which do not implement the real SMTP protocol), or the real SMTP servers, as found in MX records?
Oct
3
comment Where does the WPS Pin fit into the 4-way-handshake?
WPS must come before this stuff, because the STA does not the master secret and so cannot compute a PTK.
Sep
25
comment Using a virtual machine as a buffer between USB media and OS
Do you mean paravirtualization or classical OS emulation (WMWare)? Are you concern about USB driver vulns?
Sep
24
awarded  Yearling
Sep
20
comment What is the difference between https://google.com and https://encrypted.google.com?
@EvanTeitelman The link becomes a redirect when I click on it.
Sep
20
comment What is the difference between https://google.com and https://encrypted.google.com?
@KonradRudolph User profit is possible, indirectly: the referer makes it possible to log the origin of external links (from Y to X); sometimes these links generate a 404 error in X; if the webmaster of X cares enough, he could get in touch with the webmaster of Y so that links could get fixed. From the amount of broken links I see, I conclude that this is very rarely done. The best way to deal with broken links is obviously to avoid them in the first place, with stable URLs.
Sep
15
revised Avoid being implicated in criminal activity when using Tor
retag: add legal
Sep
15
suggested suggested edit on Avoid being implicated in criminal activity when using Tor
Sep
13
comment Does a OS manufacturer have permission to access your computer unauthorized?
@TerryChia "off-topic because it is about the legalities of the matter, which isn't accepted here" Really? Since when? Why do we have a legal tag?
Sep
9
comment Is it possible to make one processor look like another?
http://www.urbanmyth.org/microcode/ -> not found :(
Sep
8
comment ARP poisoning between a wired and wireless network
Open Wifi ou WPA?
Sep
7
comment Figure out how internet access is being monitored
@Iszi "Privacy rights when you're using someone else's computer or network in general, absent explicit agreements otherwise, should be expected to be non-existent." It depends in which jurisdiction. In France, even using the employer computer and network, an employee has privacy rights.
Sep
3
comment Is the Web browser status bar always trustable?
@MrJamin "The ping attribute, if present, gives the URLs of the resources that are interested in being notified if the user follows the hyperlink. The value must be a set of space-separated tokens, each of which must be a valid non-empty URL. The value is used by the user agent for hyperlink auditing" Links created by a and area elements See also jibbering.com/blog/?p=192
Sep
3
comment Is the Web browser status bar always trustable?
"for browsers like Chrome where the address pop-up appears inside the page area" it seems that the Chrome designers did not bother with a reserved, separated, impossible to spoof status bar (such as the FF status bar if you disable JS changing of the status) because they did not believed the status bar had any security benefits.
Sep
3
answered Is the Web browser status bar always trustable?
Sep
3
revised Do salts have to be random, or just unique and unknown?
retag: add password, hash, salt