meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 4 months |
| seen | 5 hours ago | |
| stats | profile views | 64 |
Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?
|
2d |
comment |
How was Lulzsec caught? Hubris, being half as smart as you think you are (being extremely clever and having a high IQ is not the same as being wise), keeping up a high profile that begs for a nation-state to come kick your sit-upon. The nail that sticks up will be hammered down. All of these allow profiling which means that digitally covering your tracks doesn't cover your tracks. Statistical analysis kicks in and you get pwnd by your local friendlies. |
|
May 15 |
comment |
How can I find the malicious/backdoor codes without knowing the last modified date? File dates are a really poor indicator. The best way is to do a system wide diff against the files in a known good backup and see from that what php code has been changed. Note that this doesn't even begin to address any CMS code stuck into the database. |
|
May 12 |
comment |
Disk Erasing Security - Odd Number of Writes Citing ancient literature for old servo motor head technology with GIANT inter-track spacing is cargo cult programming practice. Times have changed and other issues are more pertinent. |
|
May 11 |
comment |
What kind of equipment and make and model in the movie The Girl With The Dragon Tattoo (2011) Find a geek movie fan website where non-reality will be discussed in much detail. |
|
May 11 |
comment |
Can a cracked antivrus software do the job? Local jerk here used a similar scam as a means of passing around RAT software. Brought to you by your local chapter of "Trust-a-Crook". If they'll steal from others, they'll steal from you. |
|
May 8 |
comment |
Is it compulsory to have https on e-commerce site? You'll have to perjure yourself while taking the PCI SAQ-D self assessment if you don't. And if anything goes remiss, you'll be facing fines from your credit card processor along with having your ability to process credit cards being suspended. |
|
May 1 |
comment |
Why Adobe is recommending McAfee security scan during flash player installation? Only an issue if you're running one of the competitor's AV packages and it turns out to be one that's incompatible with McAfee's particular iteration. It's been known to get in a knife fight with Kaspersky, leaving bystanders variously traumatized. |
|
Apr 29 |
comment |
Is stripping out < and > characters an effective way of preventing XSS? Go all the way or don't bother. The types that exploit XSS will throw a script at it that tries all the permutations. They know there are plenty "it's good enough" sites out there with barn door size holes. |
|
Apr 25 |
comment |
Can my company see what HTTPS sites I went to? When in doubt, use the smart-phone bypass. Freedom often has costs that are worth paying. |
|
Apr 21 |
comment |
Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid? As applicable as buying a book on Windows XP SP1. Current to the time, but so much has happened since then, even if you're still running Windows XP. |
|
Apr 16 |
answered | If someone hacks my wi-fi connnection, what can they see and how? |
|
Mar 25 |
comment |
Keyloggers - Ports used by keyloggers One even used calls to a fake DNS to pass traffic. Hey, everything needs DNS to function. Ooh, look open firewall ports on 53. |
|
Mar 17 |
comment |
Hiding emails from Google Don't use Google GMail. Just that simple. Let some other service read your email. Or find a service that uses smime and exclusively use that for correspondence. |
|
Mar 13 |
comment |
What is nuke it from orbit? "We must destroy the village in order to save it" = MilSpeak for The Viet Cong have so infiltrated everything that we can no longer differentiate between friendlies, civilian bystanders and enemy combatants. Which meant, "Call in the BUFFs for a complete carpet bombing to erase it." Same thing goes with a really complete virus/malware pwnage, burn it to the ground to kill the anthrax and start again. |
|
Mar 7 |
comment |
How do I get my Encryption Certificate back? Encryption sounds like a really good idea until you learn to backup your encryption keys. Then it becomes a really good idea. Potential usefulness vs. actual usefulness hinges on this one concept. |
|
Mar 7 |
comment |
Site constantly getting infected Just had a Typo3 notice come in from Secunia today notifying of a MySQL injection vulnerability. It may be something new that hasn't been patched. |
|
Mar 4 |
comment |
Site constantly getting infected So the items shared in common between the two websites are the workstations used to manage them and the software platform they run on. |
|
Mar 4 |
comment |
Site constantly getting infected Also, check every workstation used to access the site for keyloggers and other malware. Once they're shown to be infection free, change ALL login credentials. DO NOT use telnet or ftp for access, their credential exchange is plaintext. Then start thinking about whether your hosting provider is actually secure. Shared hosting = shared filesystem = shared vulnerabilities. Once these bases are covered, go to Typo3 and update to the latest software, then check their forums for known security bypasses. |
|
Mar 2 |
revised |
Stack Overflow is www.doioig.gov/? If not, then could I be infected valid link note: |
|
Mar 2 |
answered | Stack Overflow is www.doioig.gov/? If not, then could I be infected |
