Chris S

294 reputation

bio	website	stoneyforest.net
	location	Grand Rapids, MI
	age	31
visits	member for	2 years, 5 months
	seen	May 16 at 4:05
stats	profile views	9

I'm just a simple IT guy, who does a bit of programming on the side.

	294 reputation	bio	website	stoneyforest.net	visits	member for	2 years, 5 months
19 badges		location	Grand Rapids, MI		seen	May 16 at 4:05

summary answers questions tags badges favorites bounties reputation activity

25 Actions

suggestions reviews revisions comments badges posts accepts all

Mar 29	awarded	Nice Answer
Mar 28	awarded	Yearling
Mar 28	awarded	Editor
Mar 28	revised	Would it be possible to overload a large part of the internet, and if so then how? Peggy Like
Mar 28	answered	Would it be possible to overload a large part of the internet, and if so then how?
Feb 14	answered	What do I need to be aware of to select a transfer method for digital forensic data?
Dec 19	awarded	Critic
Dec 10	awarded	Quorum
Oct 17	comment	Is it a bad idea for a firewall to block ICMP? It's one of those "Unless you're a networking god and really know what you're doing, don't mess with it" sort of things.
Oct 3	awarded	Commentator
Oct 3	comment	Alternatives/mitigation to Oracle Java (JRE) Shopping Questions are Off-Topic on any of the Stack Exchange sites. See Q&A is hard, lets go Shopping and the FAQ for more details.
Aug 31	comment	Dealing with excessive “Carding” attempts I'd really discourage the "authentication mechanism" idea, it's 2012, way past the time when "site accounts" should have been dumped outright. CAPTACHA is an excellent idea, as is locking out users who fail it multiple times for a reasonable period of time.
Aug 23	awarded	Teacher
Aug 23	answered	Amavisd-New and Google safe browsing
Aug 3	awarded	Citizen Patrol
Jul 29	comment	When changing a password, does it have to be completely different? @curiousguy salted MD5 hashes can be cracked within an hour with the right computer (and it's not a supercomputer). It's trivial to find a collision these days because the computational power of computers has simply increased that much. SHA1 is better, by several orders of magnitude; though most cryptographers agree SHA1 is soft-broken as a collision can be found in 2^51 operations (~130 compute-days with a modern OpenCL card). Some MD5 rainbow tables are awfully complete, your password having "entropy" doesn't mean it doesn't collide with a simpler password either.
Jul 25	comment	When changing a password, does it have to be completely different? The "problem" with this answer is that it assumes that only the well hashed password would ever be leaked. If that's the case, then yes this answer is correct. Leaks from Yahoo and others however have shown that well hashed passwords are much too rare. Also, if they're using a poor hash, like MD5, then it's easily reversed via Rainbow Table. Salt is a critical deterrent to rainbow tables, but that's getting into more depth than is necessary for the Answer. TLDR: Your answer relies on too many assumptions to be considered correct security advice.
Jun 13	comment	SIEM-AlienVault; Risk Metrics, Assets, and basics @bubbl35 I don't have any myself, it just wasn't evident from your Question that you had in fact read any. My apologies for asking the obvious. This is a security site regardless, and application configuration questions are off-topic here. Our sister sites Server Fault handles network administration and Super User for application configuration may be of interest; but you'll definitely want to contact the vendor first as (forgive the simplification) "where do I start" questions are generally going to be off-topic on all our sites.
Jun 13	comment	SIEM-AlienVault; Risk Metrics, Assets, and basics Have you tried reading the friendly manual?
Apr 12	comment	Security considerations in providing VPN access to non-company issued computers This is the exact same policy we have. If it doesn't belong to us, it doesn't connect, except Terminal Services (and even that is locked down tight).