Reputation
28,776
Next tag badge:
87/100 score
24/20 answers
Badges
8 57 101
Newest
 Nice Answer
Impact
~1.4m people reached

Feb
8
comment How to encrypt/decrypt with only encryption hardware?
If there are no decrypting tools, how are the messages to be decrypted?
Feb
7
comment How to hack a smartphone by using the phonenumber
This question is not answerable. "How can one hack an iPhone?", which is what you are asking, is far, far too broad to answer. The close reason others gave might not be exact, but you are asking about the threats concerning a specific system, so there is some logic to the close reason.
Feb
7
comment Running SSH on a different port vs adding the port number to a password
Not everyone who needs ssh access and who didn't set up the server is an end user ... So, can you explain how a "secondary password" in your parlance, is different from a randomly generated password?
Feb
7
comment Where to save Keepass' file?
I'm not sure that we can answer "best" for you.
Feb
7
comment What is the layers of abstraction (Digital Forensics)?
I am completely confused about what you are talking about. Provide more context? It appears that you are reading about this somewhere. Can you provide the reference? "Abstraction Layers" is an abstract concept in itself that is applicable to all fields of data, and not just forensics. How does this question apply to forensics?
Feb
7
comment What could eventually be effectively done to mitigate the risks of errors and backdoors in IT-security software?
@Mok-KongShen "mitigate risks and errors" - who is doing the mitigation? The body of your question does not make this clear. Please edit the question to include some of the relevant details you have provided in the comments. I'd also suggest reducing the "background" summary of the problem, because it appears to me that it does not add to the title question.
Feb
7
comment Transmitted sensitive user data
Do you want to detect hashes (can be done with some regex-fu), or detect encryption?
Feb
7
comment Transmitted sensitive user data
@IreneAnt I'm sorry people are piling on here. I cleared the messages. Let me explain: sensitive information is not passed via hashes, but via encryption. With encryption, you will not be able to distinguish random junk from encrypted data, and there would be no way to say that one random string is encrypted data. Hashes on the other hand could be identified.
Feb
7
comment Running SSH on a different port vs adding the port number to a password
@DavidMulder and what do you mean by "secondary password"?
Feb
7
comment Running SSH on a different port vs adding the port number to a password
"Nowadays SSH is only used by the same people who set up the servers." I have dozens of servers at my workplace alone where that is not the case... Again, your premises and underlying assumptions are a little strange, and it makes the question difficult to answer.
Feb
7
comment The problem I have with wikipedia showing IP addresses to the world?
@HenryWHHack If you are concerned with how a website uses your data, always read the privacy policy to see what the site does and why.
Feb
7
comment The problem I have with wikipedia showing IP addresses to the world?
Please use proper syntax and formatting in your posts
Feb
7
comment Running SSH on a different port vs adding the port number to a password
You seem to assume that you can control how users compose their password?
Feb
7
comment Running SSH on a different port vs adding the port number to a password
You create a bit of a logical paradox in your reasoning, and your premises are strange. Yes, simply "hiding" the port offers little security, but it does lower your attack surface. Yes, complex passwords are harder to crack. But you know these things, so I'm really unsure what you are asking. You will also hit upon a case, if you extend the logic a bit, where a password is complex enough to run into the "usability" issue you talk about, so a key would ultimately be better.
Feb
7
comment Are password-guessing attacks a real threat?
Many systems are designed to prevent online brute-force attempts. But that's not the threat an unguessable password protects against.
Feb
7
comment History of connected devices to my internet router (WIFI)
This will be up to the router model you are using. Look up the manual on the vendor's page.
Feb
6
comment PC infection suspected
Unfortunately, we are not a malware removal site. I'm not sure where to direct you for help.
Feb
6
comment Is Yahalom protocol secure or not?
Please expand your research past Wikipedia. A quick search turned up: eprint.iacr.org/2007/188.pdf
Feb
6
comment Yahalome protocol is (not) secure. Why?
This is really broad. Can you narrow your question at all?
Feb
6
comment How does OpenVAS work out severity?
Closing because this is a question for OpenVAS, which is answered on their site.