Reputation
28,776
Next tag badge:
87/100 score
24/20 answers
Badges
8 57 101
Newest
 Nice Answer
Impact
~1.4m people reached

Feb
6
comment Yahalome protocol is (not) secure. Why?
This is really broad. Can you narrow your question at all?
Feb
6
comment How does OpenVAS work out severity?
Closing because this is a question for OpenVAS, which is answered on their site.
Feb
6
comment How does OpenVAS work out severity?
When I Google "openvas cvss score" I get a full page of results saying "yes". I'm not sure how you were unable to find a reference. Besides, OpenVAS is free and it would be easy to see what the tool does.
Feb
6
comment OpenSSL 0.9.8zg
Define "safe"? If you are asking if there are known vulnerabilities, that's an easy thing to check. As for the rest of your questions, that's a really Mac-specific question and perhaps better suited for SuperUser or AskDifferent?
Feb
6
comment Must a system be insecure against physical access? If so, why?
sure, a computer without changeable parts or ports
Feb
6
comment Full mesh and partial mesh networks
Money solves problems. If you want to solve the highly reliable problem, then you pay for that.
Feb
5
comment Full mesh and partial mesh networks
The answer is: full mesh is resilient to a few connections going down, and service providers have an expectation to maintain service even if things go wrong. One problem won't cut off a section of their customers.
Feb
5
comment Full mesh and partial mesh networks
Welcome to Sec.SE. There are 2 problems with your question. First, while we do help with homework questions, we require that you show what research you have done to answer your own question. Second, this question isn't about security.
Feb
5
comment Tracking a criminal on my website
What you are asking for is unclear. First, you will not get the MAC address. Second, he cannot "spoof" his address. He can easily swap addresses or put hops between his address and your server (VPN, proxy, TOR, etc.). So, getting his IP is not going to be helpful. What you need to look at is a form of social engineering, as has been suggested. "Proof" of who he is has to pass legal tests for admissibility. That's why people here are suggesting that you work more with police. Whatever you end up coming up with will not help, and the police have the resources you need.
Feb
5
comment There might be a man in the middle attack against my server
Have you asked your hosting company? Maybe they shuffled your instance around and it broke the fingerprint.
Feb
5
comment CSploit/Zanti - MITM takes 4 minutes - is it normal?
There is no possible way we could answer your question with the details provided. If you can edit it to provide more relevant details, we can look at reopening.
Feb
5
comment detect forged e-mail system for windows?
You mean spoofed emails? If you mean on the client, then you would have to have that system attached to the email client you are using.
Feb
5
comment Are VPNs more secure than TOR? Why?
When I Google your title question, I get a lot of high quality results.
Feb
4
comment Is there an encryption algorithm that is fully secure?
Why do you think that the algorithms are "difficult"? What do you define as "completely secure"? Once those things are defined, I think you will find that we do use those things in SSL.
Feb
4
comment Could Instagram really have asked me to send an email of my face, or is it a scam?
I googled the content of the email and I'm seeing tons of others who have received the same thing. If you are still unsure, this is better asked at Instagram support.
Feb
4
comment Could Instagram really have asked me to send an email of my face, or is it a scam?
the email address looks fine - but it depends on the email headers to see if that's where it is actually going ....
Feb
4
comment What is the difference between MITMproxy and SSLsplit?
what does "transparent proxy" mean to you, and why does that mode mean that a proxy could work on all protocols?
Feb
4
comment What are ways to help prevent the use buffer overflow to execute malicious code?
There are decades worth of guidance on this very topic. What has your researched turned up?
Feb
4
comment While working from home, is it a bad idea to give the company you work for your IP address?
Comments are not for extended discussion; this conversation has been moved to chat.
Feb
4
comment Making my password secure
Why not use a password manager and use random passwords that you refresh on a schedule (60-90 days)? Enable 2FA on as many accounts as you can? This is a pretty broad topic.