419 reputation
29
bio website stoneyforest.net
location Grand Rapids, MI
age 32
visits member for 3 years, 8 months
seen Jun 5 at 17:52
I'm just a simple IT guy, who does a bit of programming on the side.

Jan
30
comment Why does changing physical router not warn of possible man in the middle attack?
@NickW Some clients use the MAC of the AP as a fingerprint. I know something I own does this and it's more annoying than anything; roaming from one AP to another produces error messages.
Jan
21
awarded  Yearling
Jan
9
comment Why isn't there a Global Root for SSL?
Verisign was hacked in 2010. Comodo was too. If you're big enough, the pain of removing your root cert lets you get away with murder. If you're smaller, like DigiNotar, you get hung out to dry.
Jan
8
comment Anonymous website
If you aren't an expert, you're about 99.9999% likely to get caught (I'd only give the best experts a 50:50 chance). So either don't do it or accept that you will be caught.
Aug
15
comment Do any Exchange hardening guidelines recommend disabling OWA Webready? Should they?
@D3C4FF To be clear, the problem is not where OWA is accessable from. Requiring the VPN does not fix this issue. The issue is that a specially crafted e-mail, accessed via OWA can compromise the server. Technically you could access OWA from the server itself and no remote computer would be involved at all.
Aug
5
comment AV boot disks and Truecrypt encrypted drives
Not sure if it's what you want, but you can make a WinPE disk that can do both BitLocker (native to WinPE anyway) and MS-ERT. Bonus points for snagging a fresh copy of ERT before scanning. I can post a "guide" if you're interested.
May
8
answered What is the difference between SSL and X.509 Certificates?
Mar
29
awarded  Nice Answer
Mar
28
awarded  Yearling
Mar
28
awarded  Editor
Mar
28
revised Would it be possible to overload a large part of the internet, and if so then how?
Peggy Like
Mar
28
answered Would it be possible to overload a large part of the internet, and if so then how?
Feb
14
answered What do I need to be aware of to select a transfer method for digital forensic data?
Dec
19
awarded  Critic
Dec
10
awarded  Quorum
Oct
17
comment Is it a bad idea for a firewall to block ICMP?
It's one of those "Unless you're a networking god and really know what you're doing, don't mess with it" sort of things.
Oct
3
awarded  Commentator
Aug
31
comment Dealing with excessive “Carding” attempts
I'd really discourage the "authentication mechanism" idea, it's 2012, way past the time when "site accounts" should have been dumped outright. CAPTACHA is an excellent idea, as is locking out users who fail it multiple times for a reasonable period of time.
Aug
23
awarded  Teacher
Aug
23
answered Amavisd-New and Google safe browsing