Scott Pack

7,986 reputation

32560

bio	website	google.com/profiles/…
	location	Athens, OH
	age	32
visits	member for	2 years, 5 months
	seen	8 hours ago
stats	profile views	814

Information Security Analyst at a medium sized university with a strong interest in Linux/Unix/OSX.

http://www.linkedin.com/pub/scott-pack/3/689/76a

	7,986 reputation	bio	website	google.com/profiles/…	visits	member for	2 years, 5 months
32560 badges		location	Athens, OH		seen	8 hours ago

summary answers questions tags badges favorites bounties reputation activity

217 Comments

suggestions reviews revisions comments badges posts accepts all

8h	comment	Virus affecting MS Office files For the record, I didn't write your virus no matter how frequently I say that to people.
May 17	comment	Is it a bad idea for a firewall to block ICMP? ICMP Redirect is also pretty well abandoned as well, but it happens sometimes. It makes for a good example of how wife the users of ICMP are. The linked RFC is interesting, but also very new. I would expect a very large number of network stacks in use haven't been updated since that was released.
May 15	comment	Fastest way to “lockdown” CentOS and have network intrusion detection, firewall, etc up and running? @user857990 That sounds about right. Tiger isn't exactly daily releases either but unfortunately we don't really have many choices in this area.
May 14	comment	Nessus HTML5 version 5.0.3 - PCI Scan @lbakerit It's amazing how much you get for that $1200/yr, isn't it? If you find it useful enough tick that magic check mark to indicate to future visitors that it answered your question.
May 12	comment	How can I punish a hacker? @ClickUpvote So damage was done. You might want to look for relevant breach notification laws for your jurisdiction.
May 11	comment	How can I punish a hacker? @Tass: You're joking, but take a look at the labrea project. Then consider how long it's been around.
May 11	comment	How can I punish a hacker? @ŁukaszLech: It's hard to overcome our initial feelings of violation and the urge to exact some kind of toll. Do enough investigations and you start to realize that in almost all cases the source of the attack is nothing more than an innocent bystander. Pretty sad really.
Apr 28	comment	CTRL+ALT+DEL Login - Rationale behind it? @jackweirdy: Sure. Originally it was designed for debugging purposes by the Intel team and was never intended to be used by users. On the specific keyboard used by the specific developer who originally designed it, yes, it was impossible to hit those keys one-handed. It wasn't until, what 20 years later that Windows started using it for login purposes?
Apr 28	comment	CTRL+ALT+DEL Login - Rationale behind it? @FeralOink: Thanks, I really like this keyboard too. Nice and heavy so it doesn't move on the desk, great tactile response, smooth action. The white color also tends to encourage cleanliness. It does not, however, have a pause key. Which is fine, since I've never used a pause key.
Apr 28	comment	CTRL+ALT+DEL Login - Rationale behind it? @Adnan: You used three whole fingers? Here's a picture of me doing it with just two fingers on one hand! i.imgur.com/mcxnanl.jpg
Apr 17	comment	Sharing Nmap scan results in a web page I don't think this is worth turning into an answer, but there exists a largely abandoned SourceForge project for this called InProtect. Care to revive?
Apr 10	comment	How can I protect my internet-connected devices from discovery by Shodan? My first thought when I read about the Great Census was "I wonder how many masters theses can come out of the analysis of that dataset."
Apr 9	comment	How can I protect my internet-connected devices from discovery by Shodan? 48 bits of password entropy isn't all that much. After all, "abcdefghij" is worth ~50.
Mar 18	comment	Should I change the default SSH port on linux servers? @RandomUs1r: I believe at least one of us is misunderstanding the other. Changing the port won't have any impact on transfer speeds.
Mar 18	comment	How would one crack a weak but unknown encryption protocol? @RamRachum: You might want to update your answer to specify that our starting assumptions are a perfectly spherical chicken on a frictionless plane.
Mar 12	comment	Recomended Nessus Windows-7 scan settings? @schroeder: I was afraid of that. Sounds like a recipe for disaster.
Mar 10	comment	Recomended Nessus Windows-7 scan settings? Are you saying that you want to use a Windows 7 desktop as the scanner or are you attempting to scan a Windows 7 machine?
Mar 10	comment	Should I change the default SSH port on linux servers? @TomMarthenal: Yuppers. That's one of the reasons I immediately invoke the incident handling procedures if I see SSH behavior on a non-standard port.
Mar 9	comment	Should I change the default SSH port on linux servers? @Shadur Indeed, that or denyhosts are great active defenses.
Mar 6	comment	Fresh Graduate Going into Penetration Testing @AJHenderson: That does make sense. Quite honestly I was having a hard time penetrating the language.