Reputation
Next tag badge:
92/100 score
33/20 answers
Badges
9 69 111
Newest
 Good Answer
Impact
~1.6m people reached

Mar
19
comment Can wireless (wifi, blutooth..) be attacked even when not connected?
@AlexeyVesnin perhaps it would be helpful if you actually described how a passive interface can leak information. So far, you have only asserted that it is possible, that you've done it, and to trust you. Can you expand on the details, please? Your link does not describe how to do this at all.
Mar
18
comment Collect infected email attachments
Virus total is the general place for this.
Mar
18
comment Authorization on complex ownership
I'm confused - what do you want to accomplish with a model?
Mar
18
comment During a penetration test, when is it preferable to use reverse HTTP payload and when reverse TCP payload?
I can summarize with a simple response "use whichever will not be blocked" - knowing which will be blocked is an exercise up to each environment.
Mar
18
comment How to discover technologies?
While the question is not a duplicate, the answers are generally the same
Mar
18
comment Hydra is not going further after 5 passwords found, why?
are you sure there are more passwords to be found?
Mar
16
comment Friend sent me a text and is encoded could anyone decode and tell me what it is?
decoding random strings is not what we do here
Mar
16
comment working from home, can they monitor my other computers
this is a question for your company's IT support - we don't know what they do to monitor you
Mar
16
comment How to decrypt the my 1Password Vault without using the 1Password App?
this might be a question for 1password support
Mar
14
comment I think my site was hacked. Can someone explain the “GET / HTTP/1.0” garbage in my Apache log, and what it's doing?
and exploit-db.com/exploits/38977
Mar
14
comment I think my site was hacked. Can someone explain the “GET / HTTP/1.0” garbage in my Apache log, and what it's doing?
a quick search revealed: blog.cloudflare.com/the-joomla-unserialize-vulnerability
Mar
14
comment How do I verify HTTPS connections in Mobile apps?
although this will be a definitive indiction, it is not a process for the lay-person
Mar
13
comment What is the point of using an open source and secure OS if you are running it on a machine with closed source firmware?
@MasonWheeler you are assuming, of course, that an open source project is meant to be secure. GitHub is full of grossly insecure code.... As I say above, one needs to define what one hopes to secure with the ability to see the code.
Mar
12
comment Can a rogue DNS server see my passwords?
But, as was explained in other answers, the malicious DNS entry can send you to a malicious site designed to capture your credentials for the legitimate site.
Mar
11
comment Good way to obtain an EV SSL certificate for personal use?
There are a growing number of services that will provide this functionality (the recent RSA conference had a few vendors). Unfortunately, you are likely needing to look for a product/service, which would put this question out of scope for the site. As for the question of a run-of-the-mill cert from a CA, Trey's answer below is probably the closest you will get.
Mar
11
comment How does Nessus know which services are running in a host?
the technique you are looking for is called "banner grabbing" - Most services announce what they are when you connect to them.
Mar
11
comment What is the point of using an open source and secure OS if you are running it on a machine with closed source firmware?
You appear to be equating "open source" with secure. Closed source code can also be secure. Your question will also depend on what you want to secure against and what open source code gives you in your scenario that closed source does not.
Mar
11
comment Is C a good choice for security-related software any longer?
@Solomonoff'sSecret I do not know why you are choosing this as a sticking point and making it into something it is not. Language implements SbD, but is not a factor in SbD.
Mar
11
comment Is C a good choice for security-related software any longer?
@Solomonoff'sSecret simply that one cannot address "security by design" with a language choice.
Mar
11
comment Good way to obtain an EV SSL certificate for personal use?
Would PGP provide what you need? It's free.