Reputation
32,059
Next tag badge:
91/100 score
33/20 answers
Badges
8 67 108
Newest
 Guru
Impact
~1.6m people reached

Mar
9
comment Shellshock Exploit
This is a well-known bug, and there are tons of sources that answer all your questions. What research have you performed?
Mar
9
comment Encrypted Malicious Traffic Database
Metasploit, for instance, is a collection of a wide range of communication. Different payloads, even custom ones, will have their own pattern.
Mar
9
comment Encrypted Malicious Traffic Database
I doubt that such a database exists. It would be impossible to maintain. The current trend in machine learning to detect malicious traffic is to look for anomalies and new traffic patterns, and not to try to identify malicious traffic by common metadata.
Mar
9
revised Encrypted Malicious Traffic Database
deleted 12 characters in body
Mar
9
comment Encrypted Malicious Traffic Database
You are hoping to identify malicious traffic by the signature of the encrypted transmission? I'm not sure that will work ... When the data changes, how will you differentiate between malicious data and benign data?
Mar
9
comment Motion sensor door locks
I still say: coat hanger, piece of paper, and some hand warming gel ...
Mar
9
reviewed Close Detect port scans on Linux (centos)
Mar
9
reviewed Close Suspicious .js attachment
Mar
9
reviewed No Action Needed Setting the HTTP header X-Frame-Options DENY for static assets
Mar
9
reviewed No Action Needed Should I allow browsers to remember my passwords and synchronize them?
Mar
9
comment How do I deal with a compromised server?
And then you need expertise in performing a forensic investigation (not a typical skillset for a server operator). "Ensure it does not happen again" is a very vague suggestion. This answer is a little light on actionable advice ...
Mar
9
reviewed No Action Needed How can i demonstrate remote file inclusion via get methods
Mar
9
reviewed Leave Closed Beside GIFAR are there any other known polyglot files?
Mar
6
reviewed Approve Can I dis-identify myself if I use VPN on sites?
Mar
6
reviewed Approve Using optical illusions as CAPTCHA
Mar
5
comment I can't connect to OSSIM server
This is a question for their support docs. I have found multiple sources online that can provide the answer.
Mar
5
answered What is the difference between single hardware firewall and router?
Mar
4
comment Tendency towards security-is-binary in cryptography
"Yet people feel safe" is both a broad and wildly inaccurate statement. Also, security in the digital world is not seen as binary by security experts. The reason why we want to push for high standards of security is because there is little cost to do so, only the will to do it.
Mar
4
comment User authentication with smart cards or RFID on Mac (OS X) for accessing an encrypted database
you could also use one of the many Two Factor Authentication mechanisms (Google Authenticator is free, for instance) instead of custom hardware for your users
Mar
3
revised Risks of giving a hacker my WPA key for my router?
deleted 130 characters in body