Reputation
63,409
Next tag badge:
1520/400 score
75/80 answers
Badges
17 155 253
Impact
~2.8m people reached

Feb
27
answered How to mitigate SIP Reflection Attacks?
Feb
27
comment How to mitigate SIP Reflection Attacks?
This doesn't really answer the question. OP is already blocking it with iptables, which is equivalent to a perimeter firewall in this case. The question is more aimed at making the SIP service much less attractive to attackers, to avoid becoming a target in the first place.
Feb
27
answered What's the use of making users use digits, uppercase-lowercase combination password if the passwords are hashed?
Feb
26
answered Is every client-side language more vulnerable?
Feb
26
asked Potential issues with Kim Dotcom's new proposed “encrypted webmail service”
Feb
26
comment How do I find a target on the wired network, from an attack system on Wi-Fi?
This isn't a security question, so it's off topic here.
Feb
26
awarded  Nice Answer
Feb
26
comment Penetration testing job entry exam
Sorry, but this kind of question is way too subjective and localised to be a good fit here. Furthermore, it's almost impossible to answer - if the skill requirements of the job are unknown to you, then they're certainly unknown to us. Perhaps they're trying to see how you handle tasks that you're not used to?
Feb
26
answered What security risks does Firefox 19's built-in PDF reader (pdf.js) bring?
Feb
26
comment Facebook data visibility to admin staff
Consider this as a "cover our asses" clause. At some point something is gonna break, and someone's gonna have to do some test queries on the live database which will return some personal data and potentially private messages, wall posts, etc. They're covering themselves against legal issues here by making you agree to that kind of thing beforehand.
Feb
26
answered What measures should be taken when losing an iPad
Feb
25
awarded  Popular Question
Feb
25
comment Android Apps accessing DNS settings?
@Harpreet Nope, sorry, you'll have to go ask on StackOverflow for that one since it's a code problem. I just pulled that code from another source; I'm not an android dev.
Feb
25
awarded  Enlightened
Feb
25
awarded  Nice Answer
Feb
25
awarded  Good Answer
Feb
25
reviewed Approve How to conduct a disguised LSA attack against OSPF?
Feb
24
comment Source code auditing and fake builds
+1 on this. A comprehensive audit will include white-box (source code) analysis on the main branch, and black-box (static binary) analysis on the released executables. A combination of both provides pretty decent security coverage.
Feb
24
revised What's a good secure file deleter
nuke it from orbit
Feb
24
answered What's a good secure file deleter