1,038 reputation
411
bio website
location
age
visits member for 3 years, 5 months
seen 22 mins ago

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


1d
comment Why is writing zeros (or random data) over a hard drive used when writing all ones is more beneficial?
Writing zeros or writing ones still entails writing the full sectors back to the disk. The operative being that you are creating a Manchester encoded ECC data stream that is being written to the hard drive surface, not just attempting to demagnetize it.
May
13
comment Would my protocol be safe?
Schneier's law will come quickly into focus here. It's incredibly easy to do encryption/secure transport badly and incredibly hard to do encryption/secure transport well. Choose something well tested or become a statistic. To put it another way, you can through much hard work, come up with something that you can't hack, but is found open to the wide world when others analyze it.
Apr
26
comment Methods to have multiple Anti Virus installed on one machine
In order to prevent infection, modern antivirus packages tap into the operating system at quite a low level. One package doing this is ok, two packages trying to do this may work for an hour or two if you can get it to function, but somewhere along the line they're going to get into a gunfight over system resources and induce possible heavy collateral damage. One goodie is the McAfee scan that gets installed with Adoobie Flash (what are they smoking?) every so often either disabling the much better anti-malware/virus package you paid for, causing system performance problems or lockups.
Apr
26
comment Is browsing http sites insecure?
Against getting malware? Probably not. And anyone doing a packet sniff can see cleartext of what you're reading, and your posts, hmm, they can also see your posts after you've saved them as well... nevermind.
Apr
14
comment If I DDoS through a VPN, will they be able to resolve the attack to me?
How do you do a Distributed DOS through one single connection, expecting to use it as C&C on a bunch of bots. A single VPN connection is a soda straw otherwise and you're just embarrassing yourself.
Mar
29
comment Why Adobe is recommending McAfee security scan during flash player installation?
Nothing at all, just personal preferences, Chrome and Firefox are often open side by side anyway during dev along with the IDE and a Virtualbox VM running the Linux server. Joy of running an i7 with plenty of memory and screen realestate.
Mar
28
comment Why Adobe is recommending McAfee security scan during flash player installation?
When that is offered by your Adobe Flash upgrade screen instead of McAfee... And as of late in 2015, Chrome is more secure than Internet Explorer. Back in 2012, Chrome was having some issues as well. Disclosure: Chrome is my major goto of choice for iffy websites, Firefox for dev features I like that are sometimes more user friendly than Chrome and IE as webdev compatibility tester and very little else.
Mar
28
awarded  Necromancer
Mar
1
comment Vega Scanner Took Website offline?
You used a security vulnerability scan tool to scrape social data? Be aware that anyone paying attention to the logs will start serving you a permanent 403.
Feb
26
comment Can anyone predict the scope of security in the year 2030?
Well, we hope it gets better? Given the advancing complexity of OS/program interaction, we know an enormous amount about what doesn't work, but everytime somebody announces they've got a handle on providing secure environments, yet another genius finds a new way to attack that sidesteps a lot of assumptions. IOW, no answer for something that's 15 years away. We already know the IOT is severely broken, with growth and watching the bottom line on expense by people who're creating the tech, the door's wide open.
Feb
22
comment Similarly to How Photos Have Meta Data, Does Audio As Well?
MP3 files are tagged with meta data.
Feb
20
comment Tamper proof hardware - not resistant
Old engineer's rule, "It is impossible to make anything foolproof because fools are so ingenious." Or to put it another way stated by a former boss, "I find his incompetence truly amazing, he's the only person I've ever seen break a ball bearing with a broomstick."
Feb
20
comment Why was the private key of the Superfish certificate so easily extractable?
@ceejayoz - In a country that small with as many threats as they have to face, they don't have the luxury of running a volunteer army. BTW, the password to access the private cert is komodia. Expect exploits soon. Anything that uses Komodia software is vulnerable to the attack (Qustodio, Keep my Child Secure, etc.)
Feb
20
comment Why was the private key of the Superfish certificate so easily extractable?
As a side note, the source for the SuperFish software is Komodia, a company formed by a former Israeli IDF Intelligence Core programmer. Who at the moment is claiming they are under attack per Forbes Magazine.
Feb
20
comment Why was the private key of the Superfish certificate so easily extractable?
Embedded as a string, hmm, so doing a strings search on the binaries would show it? I think the key was taped to the front of the safe in plain sight then.
Feb
19
comment Can serving HTTPS to Internet Explorer on Windows XP be made secure?
Call your local mortuary and look into the cost of cremation vs. burial, Windows XP is dead on the security front. As with IE 4 backwards compatibility back in the day, web developers across the board ceasing to support old, dead browser combinations is the quickest way of moving users into more secure environments. We didn't need to keep fluent in browser display hacks then, we shouldn't be accommodating browser/OS combinations that leave our customers vulnerable now.
Feb
17
comment Firmware Backdoor Protection
As a continuation of the threats given by firmware of all sorts, be prepared for all hard drives to be totally untrustworthy. The Equation Group hard drive firmware APT renders drive wiping to be easily applied soul salve that does nothing. Waiting for when it becomes a general production for all other malware. Rootkits will be a thing of the past, rooted firmware rules.
Feb
16
comment Why is it so hard to trace origins of DDOS attacks?
The key word is Distributed Denial of Service.
Feb
14
comment “Yea, I can hear them” I just heard this from my computer speakers
Remote access trojan...
Feb
11
comment What level of anonymity can I expect while using a library's user session?
Freedom of the press belongs to them what owns their own press.