769 reputation
28
bio website
location
age
visits member for 2 years, 7 months
seen 2 days ago

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


Jun
23
comment Hardware trojan besides network card?
They can be installed in anything with storage ability. And you can communicate with them via any communications you so wish, so having the NIC only stipulation is kind of a red herring.
May
11
comment Can a sysadmin spy on a Wifi connection?
Yes, they probably are able to. Chokepoints and all that. Do they care? Probably not. Depends on if you're at work skiving off and in a jurisdiction that feels the employer paying for the equipment and telecommunications costs is in control of the traffic generated by their employees. If you're at work, you probably need to keep your use to work related content.
Apr
11
comment Why can't we create a new SSL implementation?
+1 on the maintenance. Something along the lines of it's easy to do encryption, getting it right is extremely hard.
Apr
11
comment Why can't we create a new SSL implementation?
One of those Schneier rules. You come up with an amazing, new, efficient encryption standard to replace those 40 others who are showing their age. Congratulations, you now have 41 encryption standards... So the new implementation will just be another one in a list in the end.
Apr
11
answered How can I confirm that my server is protected against HeartBleed?
Apr
10
comment Why wasn't heartbleed fixed before?
Nature of the game, you don't know till you test, and until you start thinking nebulously and hit on it, you don't know it's there. Can't be fixed till you know... No majik to it. Some bugs have been in for decades till someone said to themselves, "what if I ask it to do this?"
Mar
25
comment Does a stolen phone mean losing access to Gmail?
He who owns the phone, owns the account. It's all in the nature of tying authentication to a device. And there is no security if the attacker has physical access to the device, whether it's a server or a smart phone.
Mar
1
comment Why do some people think Linux is more secure than Windows?
@audiFanatic "probably" have the wrong person, check the Marked as Duplicate banner.
Feb
3
comment What is the most secure way for two people to communicate?
Authentication, Authorization and Accounting.
Jan
31
comment Unknown Website Linking to my Local Files?
Normal operations happen when people make stuff publicly accessible without thinking out the repercussions. When you opened ports to allow external network access, your firewall accepted this as being a configuration you wanted.
Jan
30
comment Why is no cloud allowed in this brief?
@iszi - Heh, being baffled shows lack of communications, something I really worry about in bidding. It gets pretty costly.
Jan
30
comment Why is no cloud allowed in this brief?
Because there might be granite hanging out in that cloud. Nobody can guarantee that there's workable terrain avoidance, so the only way to avoid controlled flight into terrain is to avoid flying in clouds. Also avoiding flying into clouds means you automatically avoid strong airframe deforming updrafts and lightning. Not everyone is starry eyed over the cloud.
Dec
26
comment Building a website with MAXIMUM website security
It takes teamwork for maximal security. You hire people with expertise for each aspect and they have their own checklists.
Dec
25
awarded  Yearling
Dec
18
comment How to Check if my mail is classified as Spam
Not sure how this is a security question? Unless it's acknowledging a recognized fact that now most spam is a lethal delivery device for targeted machine exploits.
Dec
16
comment Getting rid of trojans on Windows XP - the basic toolkit
Quicker to nuke and reload. Let them feel the pain of running down all their programs and reloading those. Experience shows me that humans only learn through pain and suffering.
Dec
15
comment Open VPN has DNS leak
Networking configuration error and an assumption as to what a VPN is, not sure what it has to do with security.
Nov
20
comment Is there a fool-proof method to remove spyware from android smartphone?
Hammer and a new one for most people.
Nov
19
awarded  Informed
Nov
14
comment Is using Git for deploying a bad practice?
Wouldn't standard practice have your git repository exist one level up from your htdoc folder so accidentally serving it out wouldn't happen?