Reputation
Next tag badge:
102/100 score
19/20 answers
Badges
5 48 90
Newest
 Good Answer
Impact
~1.1m people reached

Jul
14
comment Protecting my encryption algorithm if the attacker knows the key
The folks over at crypto.stackexchange.com might have fun with this question.
Jul
14
comment How to isolate persistent pop-up browser hijack
Nuke from orbit. Persistent infections need to be handled more seriously than a surgical remedy.
Jul
13
comment Proxy Firewalls, Content Inspection, Application Layer Firewalls & Web Application Firewalls
It's all about the placement (client or server side) and what's being inspected.
Jul
13
comment Ways to prevent traffic injection by ISP
It will be hard for us to guess what your ISP might have as a policy.
Jul
13
comment Sqlmap trimming output
What about reviewing the packet trace to see if the full data is being returned? There is a chance that the webserver is trimming it, too.
Jul
13
comment dns reflection attack vs dns amplification attack
Your second definition explains the difference quite succinctly. It is possible to reflect without amplification. Amplification is simply large volume of reflections.
Jul
13
comment Why has there been a complete focus on privacy against the government but not against everybody else?
I think you have a lot of unstated and perhaps unexamined assumptions in this question.
Jul
13
comment Should traffic between two hosts in the same data center be encrypted?
I'm confused: do you want to protect the data in transit or do you want to protect the server? It looks like you have 2 different questions.
Jul
13
comment Is there any history of a major attack using password reuse?
But, that wouldn't be considered a single "large scale" attack but a lot of little ones.
Jul
13
comment Is there any history of a major attack using password reuse?
Why do you want evidence of "large scale" attacks? There wouldn't, just the individual accounts...
Jul
12
comment Would 2FA's second factor be a safe enough way to login?
You have to define "safe".
Jul
10
comment Can't get rid of “Your connection to website is encrypted with obsolete cryptography”
There are lots of questions on this here. Have a search and see if another's question has your answer.
Jul
10
comment Is someone reported a video to the fbi, would the IP address be traced?
That's up to the FBI
Jul
10
comment indicators of compromise via email servers
There are numerous AV solutions for email servers. As for 0-days, that depends on the AV solution, and that tends to increase the price.
Jul
10
comment User account password hashing
We're assuming the connection between the client and server is encrypted?
Jul
10
comment User account password hashing
#3 is out: Do not encrypt passwords: hash them
Jul
10
comment Is it possible to get Network Domain from Client with PHP or Apache?
If you are outside the network, you will not be able to know the internal domain name because you are getting the external IP address. gethostbyaddr uses DNS.
Jul
10
comment Is it possible to get Network Domain from Client with PHP or Apache?
gethostbyaddr will return the public domain, not the private one
Jul
10
comment Is it possible to get Network Domain from Client with PHP or Apache?
Assuming the webserver has access to the local network. If the webserver has access to the local network, then they already know the domain.
Jul
10
comment What is my recourse if someone made a gmail account with my name?
You cannot have an email address shut down simply because the name is the same as yours.