2,910 reputation
1416
bio website
location
age
visits member for 2 years, 8 months
seen 12 hours ago

16h
reviewed Approve suggested edit on SQL injection filter evasion
Aug
20
answered Open Source Security Dashboard?
Aug
20
comment Open Source Security Dashboard?
Splunk is very good, but free is not open-source. The 500MB/day free limit is a real problem, especially for security dashboard solutions where you want lots of events from lots of different sources.
Aug
20
revised Replacement for DVL (Damn Vulnerable Linux)?
Added disclosure per Xander's concern and Toby's note in the comments.
Aug
18
reviewed Approve suggested edit on Is social-engineering an actual threat
Aug
18
reviewed Approve suggested edit on What is the difference between EV-SSL certificates and Normal SSL certificates?
Aug
16
reviewed Approve suggested edit on Where are passwords hashed?
Jul
31
comment How do hacking groups register domains remaining anonymous?
I'm not sure what he did to earn the fraud charges. It would be profoundly dumb to pay for a highly trafficked domain with a stolen card. OTOH, I always told conspiracy theorists that the NSA would certainly never engage on mass orwellian espionage of the public because the damage to the reputation of the government would be so severe that they would be stupid to even consider it. Any level of dumb is possible.... this decade has been generally insane.
Jun
8
reviewed Approve suggested edit on What shoud I do for solving this problem ? Problem is about SNORT
Mar
19
reviewed Approve suggested edit on Does Facebook store plain-text passwords?
Mar
7
awarded  Custodian
Mar
7
reviewed Approve suggested edit on Debugging and DLL-Injection
Mar
6
comment Why does DNSSEC have a ridiculous keysigning ceremony?
"...and the system..." - you can also test backups without performing a restore. In theory, it can be ridiculous, but it's the details which always get you.
Mar
4
answered Why does DNSSEC have a ridiculous keysigning ceremony?
Feb
14
answered What does Windows's built-in encryption do, if I can seemingly always read my encrypted files?
Feb
13
answered Why are private certificates not trusted?
Dec
7
awarded  Yearling
Nov
28
comment What to do when I found a spyware that my spouse has installed?
You use the illegal keylogger to inform your efforts to collect legal data. E.g, typing "let's meet at the hotel", becomes a reason for the spouse to drive past and "accidentally" see your car parked at the hotel, to drop by at work, or to check for unusual charges on the credit card statements etc.
Nov
16
awarded  Benefactor
Nov
12
comment Phone Privacy for Small Business
Thanks for the info on this angle of the problem. Replicant has an interesting discussion on the non-FOSS binary components: trac.osuosl.org/trac/replicant/wiki/HTCDreamProprietaryDrivers Even if components such as these are active in the system, would SELinux be able to protect the data?