148 reputation
6
bio website
location United States
age
visits member for 3 years, 8 months
seen Jul 26 at 18:27

Jun
29
comment Is possible to get infected by only staying connected to the Internet (nothing else)?
@NathanGoings in my experience that's good enough in most cases. If possible I prefer VPN still for something like RDP or shell though
Jun
29
comment Is possible to get infected by only staying connected to the Internet (nothing else)?
I think it's safe to say that by patching your edge and your clients you are better off than 99% of client nodes out there, but of course, you're right - never 100%, there are too many moving parts.
Jun
29
comment Is possible to get infected by only staying connected to the Internet (nothing else)?
Unless you are very unlucky or a wanted person, this should be sufficient. But if you can, always keep your tablet (however updated it is) behind the edge and not exposed, because it is just begging for trouble otherwise.
Jun
29
comment Is possible to get infected by only staying connected to the Internet (nothing else)?
@NathanGoings , that happens to me (and probably everyone) whenever I expose shell on its default port to the Internet. It happens with far less frequency when I use a non-standard port on the edge and forward, and of course doesn't happen at all when I keep it behind the edge and use only VPN to get in. But you can use fail2ban to protect against this scenario.
Jun
29
awarded  Teacher
Jun
29
answered Is possible to get infected by only staying connected to the Internet (nothing else)?
Sep
30
awarded  Popular Question
Nov
28
accepted Open source or common implementations for reverse proxy web application security
Sep
25
comment Open source or common implementations for reverse proxy web application security
Rook, thank you for an insightful and frank answer. Of course I do not want to run a deprecated version of anything public-facing, but these were the cards I was dealt. I deal more in systems than in development, and to fix this software would be a major development project because of the tight coupling of the original software to some features in that version of Apache. You must agree, a WAF is better than nothing?
Sep
25
answered Is it harmful to allow http requests with very long querystrings in IIS?
Sep
24
comment Is it harmful to allow http requests with very long querystrings in IIS?
Why aren't you POSTing that big amount of data?
Sep
24
awarded  Editor
Sep
24
revised Open source or common implementations for reverse proxy web application security
added 4 characters in body
Sep
24
asked Open source or common implementations for reverse proxy web application security
Aug
13
awarded  Scholar
Aug
13
accepted Any place where I can find some template or base documents for IT/Infosec Compliance?
Nov
17
awarded  Supporter
Nov
17
awarded  Student
Nov
17
asked Any place where I can find some template or base documents for IT/Infosec Compliance?