Reputation
23,227
Next tag badge:
102/100 score
19/20 answers
Badges
5 48 90
Newest
 Good Answer
Impact
~1.1m people reached

Aug
22
comment Why are packets constantly being sent to international ISPs?
I'm assuming that the 44947 number in the screenshot is a process number? What is that process?
Aug
22
comment Why are packets constantly being sent to international ISPs?
what network processes do you have running?
Aug
22
comment deliver a malicious payload via a cloned website
You could try the older version of SEtoolkit. As for why they removed functionality, you will have to ask the developers.
Aug
22
comment Thousands of 404s from various search engines
lol - ok - it will take a while to scrub that image from my head ... My question now is: what is your question? Have you found your own explanation or are you still looking for help?
Aug
22
comment Block Incoming-Teamviewer Connection
This doesn't answer the question. The OP asks about a central, network-wide solution and not one on each client.
Aug
22
comment Is there any authentication scheme relying only on the “secret” question?
Heck, when I'm asked to supply an answer to a "personal question" I still generate a long, complex string like my password.
Aug
22
comment What is the PCI requirement for tracking software installation on workstations?
"centrally or media that is difficult to alter" Centrally isn't a requirement but an option.
Aug
22
comment Aptexx resident anywhere broken authentication
You do not describe what you do understand about the exploit and then what you do not. It's hard for us to guess and we aren't going to try and explain every level of the exploit to you. Also, your link is not to the exploit, but to a general definition of "improper authentication".
Aug
22
comment Thousands of 404s from various search engines
I edited your post to remove your URL - when I tried to visit, I got redirected to porn. In particular, I visited example.com/egblzsd/
Aug
21
comment Aptexx resident anywhere broken authentication
This question is too broad and you do not provide enough details. Add the link to the exploit and explain what you do understand and what specifically you don't.
Aug
21
comment What is the PCI requirement for tracking software installation on workstations?
Your answer of "Yes", then makes no sense. Shouldn't it be "No"?
Aug
21
comment What is the PCI requirement for tracking software installation on workstations?
This doesn't address the question about the "centrality" of the log collection.
Aug
21
comment Network security from the inside
You need to include those guidelines instead of just linking to them.
Aug
21
comment ssh dns spoofing warning - possible investigation?
Change the wifi password, change the admin password on the router, check the DNS settings on the router.
Aug
21
comment Forensics Tools on Linux Servers
I'm not seeing this as a product recommendation question, but a general tool use question regardless of the specific tool.
Aug
21
comment E-Mail made in Germany. Better than traditional ones like Google or Yahoo?
@jknappen SMTPTLS means that email even between providers is encrypted, like between Yahoo and Gmail: yahoo.tumblr.com/post/81529518520/…
Aug
20
comment Is it possible to send a token per request in Spring Security (CSRF Synchronizer Token Pattern)?
Because this is about Spring functionality, it would be better asked in StackOVerflow.
Aug
20
comment Modern alternative for passwords
The best solution I have seen is a wristband that tracks your heart. It constantly updates itself with the changes to your heart's function. It's expensive and buggy at the moment, and the potential for the band to be used to diagnose heart problems is too risky to be used in corporate environments (privacy issues).
Aug
20
comment Modern alternative for passwords
It all comes down the the MFA structure: something you know, something you are, and something you have. What you are changes over time (just ask pregnant ladies), something you have can be lost (just ask me), but something you know can persist the longest without modification (just ask my co-worker's Post-It note). Passwords are the most reliable, even though they are the most insecure. That's why combining them is seen as the better method, and why they will be used as a backup.
Aug
20
comment Modern alternative for passwords
You HAVE to include a password alternative to biometrics because the possibility for changes to your body are high. For MFA, there are multiple packages that rely on the token, OTP, code, SMS text, NFC signal, etc. as the sole access method, but also provide the ability to enter a password (in case of a lost device). The password is a backup. Passwords will ALWAYS be a backup, just as a hardware key will be a backup to a password-protected car.