Reputation
Next tag badge:
102/100 score
19/20 answers
Badges
5 48 90
Newest
 Good Answer
Impact
~1.1m people reached

Jul
16
comment Detecting a MITM attack
That's not IP Spoofing, that's just a duplicate IP on the network.
Jul
16
comment Detecting a MITM attack
I'm not sure this will protect you from IP spoof, but it does protect against MAC spoofing. This will also only work on the local network.
Jul
16
comment Detecting a MITM attack
Did you mean "spoof DNS" or "spoof IP"?
Jul
16
comment Detecting a MITM attack
@ParthianShot I'm not sure about the "transparent" part. Your ISP is loudly part of the route.
Jul
15
comment How to start writing crypto software
Needed knowledge for what? You appear to have answered your own question: crypto classes are in the math department, not computer science. People writing good crypto libraries have a strong math background.
Jul
15
comment Backup procedure for PCI
Yep, but it's worth a mention somewhere.
Jul
15
comment Backup procedure for PCI
What about 9.5.1 "Store media backups in a secure location, preferably an off-site facility, such as an alternate or backup site, or a commercial storage facility. Review the location’s security at least annually."
Jul
15
comment Is there such thing as an OS “internal firewall”
Perhaps the term "sandbox"?
Jul
15
comment Backup procedure for PCI
What about 9.5.1 "Store media backups in a secure location, preferably an off-site facility, such as an alternate or backup site, or a commercial storage facility. Review the location’s security at least annually."
Jul
15
comment My Mom's Flash Player
This can work, but note that some Flash sites do not work properly in PepperFlash. I've worked for a site for whom this was a problem.
Jul
15
comment My Mom's Flash Player
The first question is really up to each individual vendor's site: there isn't going to be a catch-all solution. Your first question is also not an InfoSec question. The second question will result in a HUGE list of published issues. Short answer for #2 is: visit a site and a hacker now owns your computer. Google "Flash CVEs" for the official list of details on Flash's vulnerabilities.
Jul
15
comment How to isolate persistent pop-up browser hijack
"nuke from orbit" as in "reformat the drive and reinstall everything". This question is more of a tech support question than it is an InfoSec question. You aren't asking about hacking/viruses, you are trying to recover from one. I don't believe there is a malware recovery site on Stackexchange, but there are multiple other forums dedicated to this topic, including on AV vendor's sites.
Jul
15
comment Windows: unknown program/service etc. sends HTTP request to download a file; how can I find the origin of that request?
This question as asked (how to discover what called svchost), appears more to be a Windows-internals-specific question, and might be better asked over at SuperUser (despite viruses being a factor). If the reeal question you're asking is how to deal with this infection, then @DeerHunter has your answer.
Jul
15
comment Why do we use passwords on sites?
@immibis For web mail, not common, but for on-prem enterprise email systems, it's very common.
Jul
15
comment Why do we use passwords on sites?
Consider this other factor: emails are sent in the clear. Anyone who has access to the email chain can log in. Even with the FB auth API, the lookups are encrypted and protected.
Jul
15
comment Browser Popup Survey Scam
Have you run anti-virus/anti-malware on your machine? It will be impossible for us to troubleshoot your machine from descriptions alone.
Jul
14
comment What stopping someone from offering distributed and encrypted email? Just like Bitcoins
chat msgs are also stored on your machine - please look at the existing de-centralized, encrypted chat clients to see if it meets your expectations.
Jul
14
comment What stopping someone from offering distributed and encrypted email? Just like Bitcoins
There are many de-centralized chat clients used for this very purpose. Most people believe that email is a dead communication tool and chat is superior.
Jul
14
comment How the process of SSL handshake works?
I don't think the title matches the question
Jul
14
comment A malicious folder is created automatically?
@RK The message in the image says nothing about a folder. That's a website URL.