Reputation
23,237
Next tag badge:
102/100 score
19/20 answers
Badges
5 48 90
Newest
 Good Answer
Impact
~1.1m people reached

Aug
25
comment Profile applications from traffic analysis
wireshark does exactly this
Aug
25
awarded  Enlightened
Aug
25
awarded  Nice Answer
Aug
25
comment Is a server infrastructure fundamentally possible which the smartest person can't breach?
Even so, removing the human element of the defence, the strategist is not working with complete knowledge or even complete control of his own systems. Infrastructure is built on an interconnected matrix of other people's work and dependant systems. A breakdown in any one of those elements (like a zero day) defeats even the most perfect defence. So, what about building everything from scratch? OS, firmware, protocols, encryption, etc., etc.?
Aug
25
comment Is a server infrastructure fundamentally possible which the smartest person can't breach?
I worked with one young networking security grad who was very interested in the possible attacks on our systems. As I spoke of the various attacks that we had already experienced, he dismissed them all as "social-based" attacks, and thus, ultimately uninteresting. As we were standing in the midst of the data center with multiple racks, A/C units, power supplies, cables and blinking lights, I turned to him and exclaimed: "This is ALL social! Systems exist for people to use!" I know it sounded trite, but it hammered home for me why there ought not to be a delineation of the technical and social.
Aug
25
comment Is a server infrastructure fundamentally possible which the smartest person can't breach?
Yes - I enhanced the zero day section. Remember that even with the lock/box/swallow plan, there are a number of other human elements to a strategy that could cause problems. Power, network connection, maintenance, patching, etc. all come into play at some point in the strategy. I have yet to hear of or devise a plan that can account for all the human elements at play.
Aug
25
revised Is a server infrastructure fundamentally possible which the smartest person can't breach?
added 197 characters in body
Aug
25
revised Is a server infrastructure fundamentally possible which the smartest person can't breach?
edited body
Aug
25
answered Is a server infrastructure fundamentally possible which the smartest person can't breach?
Aug
25
revised Is a server infrastructure fundamentally possible which the smartest person can't breach?
deleted 15 characters in body
Aug
25
revised Does Gmail's 'preview' feature for documents in the browser prevent malware?
edited tags
Aug
25
comment Does Gmail's 'preview' feature for documents in the browser prevent malware?
It would prevent exploits aimed at MS Word vulnerabilities, but could potentially exploit vulnerabilities in Gmail's preview feature.
Aug
25
revised PCI Compliance SAQ-A-EP or SAQ D
edited tags
Aug
24
reviewed Close my website got spammed please help me
Aug
24
comment How can I protect a mobile application from LogJam?
I think you would have to custom code a check for the LogJam vuln and block connection attempts. If I am correct, this is a programming problem/solution.
Aug
24
comment Automatic detection of a compromised web server
I hear you, but the best course of action is a local process to monitor those files. External checking is prone to the problems you and others have identified.
Aug
24
comment Where is the best place to get descriptions of malware?
you mean like exploit-db.com? exploit-db.com/dos/?order_by=date&order=asc&pg=1
Aug
24
revised Enabling MFA in Windows 7
used terminology
Aug
24
comment Enabling MFA in Windows 7
You mean "multi-factor authentication"
Aug
24
comment A compromised USB
Grab a live CD and pull the hard drive. If you leave the hard drive in, all bets are off.