Reputation
Next tag badge:
88/100 score
26/20 answers
Badges
8 65 107
Newest
 Good Answer
Impact
~1.6m people reached

3h
comment Should the RTP feed from a surveillance camera be protected?
Should it be protected? Yes. Are you really asking about https vs srtp/rstps?
4h
comment Could keystroke timing improve security on a password?
but these are all similar pros/cons for any biometric, correct?
5h
comment Is there a list of currently active botnets?
Google has many rich hits for your title question.
5h
comment Somehow hackers have used my email box to sign up me here!
Did you write this on the weekend? security.stackexchange.com/q/121381/6253
7h
comment Spoofing an NTP server to allow bruteforce on any smartphone
Also, I think the device gets its time from the cellular network, not NTP.
8h
comment Looking for Defensive security training or content
I think the search term you are looking for is "Blue Team training". But, your question makes an error in logic: "defensive security" is not about looking for bugs and leaks, that's "offensive security".
8h
comment Is `/dev/urandom` secure to generate a salt on a Virtual Machine?
@DarioOO why are predictable salts to be avoided? And how is time predictable?
8h
comment Unknown MAC in network
What's the other IP this MAC is associated with? Is the laptop in question a work machine? One guess is that your laptop is infected with something that changes your MAC and IP assuming that it's part of a corporate network. It tries pings out on a semi-random schedule, trying to connect to it's control server.
8h
comment Unknown MAC in network
And eSight and Huawei don't make sense in your network? No VPNs into work, no other connected networks?
8h
comment Unknown MAC in network
The traffic pattern is one of a device pinging home. Could you post the MAC?
8h
comment Unknown MAC in network
that IP looks like a broadcast IP - when I Google it, I get results like eSight from Huawei. Is this a home or corporate network?
9h
comment Is `/dev/urandom` secure to generate a salt on a Virtual Machine?
theoretically, system time in epoch could be a suitable salt?
9h
comment Is `/dev/urandom` secure to generate a salt on a Virtual Machine?
Then Steffen has your answer
9h
comment Is `/dev/urandom` secure to generate a salt on a Virtual Machine?
are you asking about the randomness of urandom or the suitability of urandom for generating salts? Or are you asking how random a salt must be to remain secure?
9h
comment How can I be sure that gochange.co is a secured service?
Unfortunately, we do not do product or service reviews.
11h
comment OWASP security for android app
You need to design your security so that it can survive the IP being known to everyone.
1d
comment How can you figure out which encryption was used just by looking at the data?
There are numerous questions on this site asking similar questions. Please review them to see if your question is unique, and we can consider re-opening.
1d
comment What are best ways to begin to write embedded system exploit code?
Your question is far too broad to answer, and I think your problem in searching is because you are looking too hard at "embedded systems". Those systems contain OSes: those OSes contain vulnerabilities. That's where you need to focus.
1d
comment Is there any chance of PC getting infected when you analyse PCAP malware file?
assuming the pcap file doesn't target vulnerabilities in Wireshark, you are at no risk
1d
comment What are best ways to begin to write embedded system exploit code?
Also, I'm not sure that the Bangladeshi hack had anything to do with the embedded systems of the switches - the problem appears to be because of the simplicity of the devices (no VLANs).