4,345 reputation
2820
bio website
location
age
visits member for 3 years
seen 5 hours ago

20h
comment ARP: Forwarding or dropping with IPTABLES
You're mixing up your layers in this question. Ports are L4, packets and iptables are L3, ARP is L2. If the packet destination IP is the router, I don't know why it would hit the FORWARD table, I would think you would want the INPUT table here, but it's not clear exactly what you're trying to accomplish. Guessing at the problem: the router may be passing your L2 frame with the poisoned MAC up the stack to L3 and respond if it's running in monitor mode. With monitor mode disabled, it should drop the non-broadcast frame before sending it to L3.
Dec
21
reviewed Approve How can an online hack be traced back to the perpetrators?
Dec
17
reviewed Approve SQL injection — why isn't escape quotes safe anymore?
Dec
17
reviewed Approve Can webcams be turned on without the indicator light?
Dec
17
reviewed Approve How to determine what type of encoding/encryption has been used?
Dec
17
reviewed Approve How does Amazon bill me without the CVC / CVV / CVV2?
Dec
16
comment How do I release a self made program without it being tracked back to me?
Don't forget the problem of people identifying you through your writing style, or similarly your coding style or even the designs of your UIs. The code shouldn't look like anything you've ever written, or talked about. There are also identifiable traits in your post. Sentence starting with I've, hyphen missing a space for an en-dash, elipses at the end of a sentence, slashes as "or". "tube" is regional, the time of the post, etc. When you write your docs, they can't look like you wrote them. schneier.com/blog/archives/2011/08/identifying_peo_2.html
Dec
7
awarded  Yearling
Dec
6
reviewed Approve Is this PHP TOTP (time based one time password) idea sound?
Dec
5
reviewed Approve Since I can set the source IP address to anything using raw sockets, does this mean I am untraceable?
Dec
4
reviewed Reject What to do about ssh breakin attempts
Dec
3
awarded  Popular Question
Nov
30
reviewed Approve php execution possibility in img src
Nov
30
reviewed Approve Corporate PKI - SHA1 deprecation
Nov
27
reviewed Approve is it sufficient to convert '(single-quote) to ` ' `
Nov
25
revised Are there any disadvantages to encrypting the password hash?
typo and a couple definite and indefinite articles.
Nov
24
revised Poodle vulnerability and eCommerce
added 118 characters in body
Nov
24
comment Poodle vulnerability and eCommerce
It's a good point, because the client starts the connection, the renegotiation is only between the client and the MITM, not with the server. You could see the user-agent strings for the SSLv3 connections, but now all SSLv3 connections should be considered suspicious. I'm updating the answer.
Nov
21
answered Poodle vulnerability and eCommerce
Nov
17
reviewed Approve What are the risks of storing passwords in a GPG encrypted file?