858 reputation
210
bio website
location
age
visits member for 2 years, 11 months
seen 1 hour ago

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


1d
comment Anonymity on Facebook. Most of the answers are at least partially incorrect
Given the shifting sands that Facebook presents for privacy controls, the Answers will always be partially incorrect. Your free Facebook Koan for the day.
Nov
23
revised What port services can hackers use to break into a server?
spelling on break in question and paragraph structure
Nov
23
suggested suggested edit on What port services can hackers use to break into a server?
Nov
22
answered Why do credit cards have chips, if I can purchase online without the chip being read?
Nov
22
comment Why protect files with sensative information with .htacces?
@CamilStaps - it's pretty simple. Detect a foul hole in some Wordpress addon that allows you to create a .php file in a directory, then call it. The PHP interpreter merrily does your dirty work and your target's compromised. Now if your target had put an .htaccess file in place denying direct access to the file, he wouldn't be spending time doing one of those "Oh, &^#%" site reloads. Also, the PHP interpreter doesn't process .xml or other files where configuration data may be stored so once again... I'll let you peruse some web logs to discover all the attempts...
Nov
21
revised Is storing CVV compliant with PCI standards?
formatting change for clarity
Nov
21
suggested suggested edit on Is storing CVV compliant with PCI standards?
Nov
21
comment Has 100+USD, accidentally
If you use it to "purchase" anything, then, yes.
Nov
20
comment Is storing CVV compliant with PCI standards?
There is no need to store the CVV or anything else if you're using a proper payment gateway. Century Business Solutions issues a token that can be accessed for future card charges by your company for the account with which it is associated. NO customer card data is stored.
Nov
18
comment How to be secure on a unsecured wifi?
Only if there's encryption or if you're using a VPN tunnel to jump to a server that provides access to the internet.
Nov
18
comment Why protect files with sensative information with .htacces?
a malicious user may still end up correctly guessing the name of this secret key file Heh, web logs are full of these guesses against security by obscurity and it must work quite well otherwise they wouldn't be so persistent. If it's blocked by .htaccess deny then it explicitly isn't available for guessing.
Nov
15
comment Truly deniable encryption
First law in forensics is to make a read-only clone so multiple tries may be attempted. Upon finding the LUKS header trashed, they'd be smart enough to put 2 and 2 together to look 4 more answers from you. They've seen enough Wile E Coyotes out there who always are trying to out-trick themselves.
Nov
7
comment Why should I have secure passwords for sites that I pay bills on?
Misery starts with Identity Theft and can linger for years afterwards with all sorts of results from basic embarrassment to hellish background checks that deny quality of life. Enabling identity theft is as simple as using garbage universal passwords.
Nov
6
comment Modifying credit cards to increase security
As a vendor, if I see a defaced card, I immediately think "Counterfeit" and would decline to accept it. You can wipe the magstripe quite easily though.
Nov
3
comment Is blocking a country's access to a website a good measure to avoid hackers from that country?
As long as they're not smart enough to use VPN and proxies. Often as effective as the Maginot Line was at keeping the Germans out of France in WWII. There's always a way around.
Nov
2
comment Continued Use of Kerberos
Can verify that. At one time Kerberos authentication over VPN to Windows Server 2003 would die if the packet size was too large due to VPN overhead causing packet fragmentation.
Oct
28
comment What are the insecure Protocols in terms of PCI DSS
+1 for FTP et.al. If you're using a plaintext service with an insecure, hackable client to access your e-commerce website, you've already lost the battle.
Oct
25
comment Google Chrome browser warning for goo.gl
Because at this time, it is highly probable that shortened links are malicious. Until these link shortening services start scanning their own product and eliminating malware links proactively, the problem will only get worse.
Oct
25
revised bit.ly is not safe and an attack page?
bit.ly needs to fix their own apple cart.
Oct
25
answered bit.ly is not safe and an attack page?