Reputation
1,118
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
6 12
Newest
 Yearling
Impact
~44k people reached

15h
comment The problem I have with wikipedia showing IP addresses to the world?
We not be the arbiters of website policy. Their policy, no anonymous editing. Freedom of the press belongs to them what owns the press. Create your own anonypedia with your own policy. Or register your account.
Feb
4
comment While working from home, is it a bad idea to give the company you work for your IP address?
So I can put you in my development environment server's IP whitelist. You want control of your access, I want control of my access. It's a mutual protection thing. Even higher restrictions apply to the staging environment. I might not trust you enough to give you access there.
Feb
3
comment Can the identity of a person in Nigeria be confirmed?
Get hold of your bank and any other financial institutions you are involved with and tell them that your husband's a live one on the line with a con-artist and has swallowed it hook, line and sinker. This is an intervention type situation that needs to be nipped in the bud before much more than $100 escapes out the door. Cons tell a convincing story and many's the mark out there that finds out too late that faith based decision making can be fatal in many ways. The family lawyer, if you have one needs to get a heads up as well.
Feb
3
comment Can the identity of a person in Nigeria be confirmed?
Also, if they provide Linked-In pages showing the company they work at, take it and any information contained within with a grain of cyanide... At least you won't miss your bank account afterwards.
Feb
1
comment PCI Compliance Scan Failing for supporting TLS 1.0, but removing support breaks < IE 10
@munchkin - and as of now, Microsoft thinks the same, no more security updates for anything earlier than IE 11.
Feb
1
comment Detecting skimmers and other ATM traps
Newest form of skimmers are parallel read mylar shims for chipped cards. They're totally invisible as they slide into the slot. Their contacts overlay the card reader contacts.
Jan
31
comment Why does an overload of requests give one root access all of a sudden?
Sounds like one of those FOAF things, direct link to peer reviewed content where somebody actually did it, or it didn't happen.
Jan
9
revised How does resetting passwords twice increase security after a breach?
added 335 characters in body
Jan
9
answered How does resetting passwords twice increase security after a breach?
Jan
4
comment What was behind the surge of Adobe Flash Player vulnerabilities/patches in 2015?
A lot of chickens coming home to roost over all the time Flash has been in operation. And 2015 was the year of the big coop cleanout shovel to remove what chickens convert bugs into. Despite that, Flash still is being patched for nasty bugs.
Jan
3
comment Where can I get a list of “bad” IP addresses that are likely to be used by attackers or spammers?
Given the moving target of compromised servers, individual computers, all addresses are a possible attack source. There is no such thing as a trusted source on the internet. While you might put a permanent block on netblocks like the RBN, it's only a small subset of potential attack vectors
Dec
28
comment Is Telegram secure?
History bears out that Telegram's "Roll your own Security Spliff" produces dreams of protection. Seriously broken and not theoretically so...
Dec
27
revised Can I prevent my ISP from accessing my network if I change my router config?
update
Dec
27
revised Can I prevent my ISP from accessing my network if I change my router config?
homehub
Dec
27
revised Can I prevent my ISP from accessing my network if I change my router config?
added info canadian ISP
Dec
27
answered Can I prevent my ISP from accessing my network if I change my router config?
Dec
25
awarded  Yearling
Dec
16
comment How different should passwords be?
If you're using password1, you should change it to password2... It's amazing how common the use of password1 is... Seriously, the change must be such that it can't be guessed by people who know you. And 2-3 characters is not a password change, in reality, humans have a bad habit of creating patterns and a little knowledge about them shows their habitual patterns.
Dec
13
comment How do IP addresses leak information about whether they are a home client or not?
Netblock assignment registration, whois information and reverse dns lookup, geolocation lookup. But then that's databases about IPs, not the actual IP. Though geolocation can be a scream due to dhcp assignment. Since IPV4 is getting low Qwest netblocks from a distant region can be assigned if the local pool gets low. Washington users getting Minnesota series addresses. iplocationtools.com has interesting info.
Dec
12
comment What is the community doing for supporting downgrading TLS?
Sounds like any Kazakhi internet user out there should cease and desist from using the internet for buying and selling anything. Financial information's a lot more desirable than what blogs are being read, probably a governmental five-finger discount tax is in the cards. Supporting TLS downgrade just plays right into aiding and abetting.