Reputation
28,776
Next tag badge:
87/100 score
24/20 answers
Badges
8 57 101
Newest
 Nice Answer
Impact
~1.4m people reached

Dec
14
comment Pre-Installed Tails OS Flashdrives
Please do not use shortened URLs in posts.
Dec
14
comment Pre-Installed Tails OS Flashdrives
I'm not sure what you are asking. How safe what is? Tails? This USB stick?
Dec
14
comment Why is it important to apply security best practices when the risk they protect against is very low?
@Aron assessing risk before an incident and failing to recover from an incident are 2 very, very different things. The OP is asking about assessing the risk of an activity before it even gets to the point of an incident.
Dec
14
comment Using 8192 bit keys GPG
Then it looks like a problem for the developer of that software. I'm not sure how we could help.
Dec
14
comment Legal insurance for penetration testers
This question is really specific and looks more like a legal question than a security question.
Dec
14
comment Covert Channel Bandwidth
This isn't a security question, but a networking one. Have you looked at wireshark?
Dec
14
comment Using 8192 bit keys GPG
"one of the files" - what files?
Dec
14
comment Why is it important to apply security best practices when the risk they protect against is very low?
@Aron That's an interesting statement. Do you have any substance to back it up?
Dec
13
comment Tor browser further anonymity requirements
@YdobEmos do you have a source for that claim?
Dec
13
comment Must an attacker using a Smurf attack be on the same network as the victim?
Smurf attacks were popular when?
Dec
13
comment How would a resourceful government block Tor?
Music and Internet censorship is also about the content, not the medium.
Dec
13
comment How would a resourceful government block Tor?
Censorship is about content, not communication channels
Dec
12
comment How would a resourceful government block Tor?
I don't think you are using the term "censorship" correctly.
Dec
12
comment Where Does ClamAV Get Its Virus Signatures?
@Volomike if that is true, then your accepted answer does not answer your question
Dec
12
comment Received UDP packet with IP ID of zero:
Actually, there is guidance from Linux distros on how to tweak the stack to not always start with an ID of 0 on the first packet.
Dec
12
comment What is the community doing for supporting downgrading TLS?
@cnst You have other posts about this, but I am very confused about the problem. If the ISP wants to be the SSL MitM, then HTTPS will still work fine and users will be able to browse to sites. You appear to see a big problem, but you have not been clear on what that problem actually is.
Dec
12
comment What is the community doing for supporting downgrading TLS?
After the edit, it seems like this needs to be migrate to serverfault. It's asking about the configuration of a server.
Dec
12
comment Where Does ClamAV Get Its Virus Signatures?
This doesn't answer the question. The OP is asking how the main ClamAV database is built and how to download it.
Dec
12
comment Why is it important to apply security best practices when the risk they protect against is very low?
@halfinformed The impact of a certain level of soft impacts, like reputational risk, can be quantified. What is impossible to quantify, which I already stated in my answer, is the likelihood of a certain level of reputational risk to be experienced as a result of any one security incident. It seems as though you equated "impact" with "risk" in your comment.
Dec
11
comment Received UDP packet with IP ID of zero:
I'd want to ask, "do you need to resolve this?" It's an info-level issue, and each Linux distro can have different ways to tinker with the IP ID. Look up the issue on their forums.