Reputation
32,198
Next tag badge:
92/100 score
33/20 answers
Badges
8 67 108
Newest
 Guru
Impact
~1.6m people reached

Apr
28
comment OWASP security for android app
You need to design your security so that it can survive the IP being known to everyone.
Apr
27
comment How can you figure out which encryption was used just by looking at the data?
There are numerous questions on this site asking similar questions. Please review them to see if your question is unique, and we can consider re-opening.
Apr
27
comment What are best ways to begin to write embedded system exploit code?
Your question is far too broad to answer, and I think your problem in searching is because you are looking too hard at "embedded systems". Those systems contain OSes: those OSes contain vulnerabilities. That's where you need to focus.
Apr
27
comment Is there any chance of PC getting infected when you analyse PCAP malware file?
assuming the pcap file doesn't target vulnerabilities in Wireshark, you are at no risk
Apr
27
comment What are best ways to begin to write embedded system exploit code?
Also, I'm not sure that the Bangladeshi hack had anything to do with the embedded systems of the switches - the problem appears to be because of the simplicity of the devices (no VLANs).
Apr
27
comment What are best ways to begin to write embedded system exploit code?
being embedded isn't magic - it's simply that it's a system that is really difficult to update and patch - if you have an unpatched Linux OS, you can hack into it using known exploits
Apr
27
comment What are best ways to begin to write embedded system exploit code?
this is a really, really broad question - can you narrow it down?
Apr
27
comment Forensic analysis of file metadata
@ose the type of file is not the issue - it's how the file was created, and the OS on which it resides.
Apr
27
comment How is encryption different for Windows yet they are identical?
I'm starting to think this is a Windows support question and not a security question. I think it needs to be migrated to SU.
Apr
27
comment Oracle sql injection
You can add comments to your own question.
Apr
26
comment Samba open ports, not being filtered
Samba uses ports 139 and 445, as you know. Now that you have more information, what is your question? Is it still "shouldn't these be filtered?" Your latest edits seem to now be concerned with UPnP. Can you clarify?
Apr
26
comment Samba open ports, not being filtered
I edited your question as if you ran the -sV from the beginning. I hope I captured your question well. It got confusing with your last edit.
Apr
26
comment How to stop someone from hacking me
I'm confused, you want the hacking to stop, but you don't want one of the hackers in trouble? Do you want to get the authorities involved, or do you just want a technical solution? Would simply patching and updating your systems and changing all your passwords work?
Apr
26
comment How many email accounts should one have?
As it stands, this question is purely up to opinion and might get closed. It depends on a multitude of factors that will depend on each individual. I'm not sure it is answerable. Maybe if you rephrased to question to narrow in on a specific problem?
Apr
26
comment How many email accounts should one have?
How would one define or measure optimality?
Apr
26
comment What is ffmpegsumo.dll
We really aren't a malware analysis site. Even though there is a legitimate file that uses that name, your AV caught these files, so you should suspect them. If you want to make sure, please upload to virustotal.com for a wider view.
Apr
26
comment Can government query company, such as Google, to get list of accounts associated with some information, such as IP address or phone number?
I'm sure that if a law enforcement agency has a legal request, they can ask for whatever information they require. I'm not sure what you are asking, though. Are you asking what is legally possible, or what is technically possible? Or asking what Google does?
Apr
25
comment How to check if I have a rogue SSL/TLS certificate?
Please disclose your relationship to the links you supply. You are an employee of ssl2buy.com.
Apr
25
comment Does using a live CD make you more vulnerable to remote attacks?
Comments are not for extended discussion; this conversation has been moved to chat.
Apr
25
comment Make a program execute only from verified drive
This is a programming question, not a security question.