856 reputation
210
bio website
location
age
visits member for 2 years, 11 months
seen yesterday

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


1d
comment How to hide my ip and browsing history from others on my network?
Hiding your IP on the local network is known as either pulling your network jack, turning off your wi-fi or shutting the computer off... No address, no delivery. As long as there aren't persistent arp table entries. Every time this question is asked, much laughter and forehead palming is generated.
1d
answered What can IT see and log?
1d
comment What can IT see and log?
One reason why spear-phishing is so successful on the higher ups in companies... Ahem. Anyway, OpenDNS is advertised as a means protecting companies against malware attack and blocking use of unsavory websites that can lead to harrassment lawsuits (business level). The blocked sites are logged on OpenDNS, so you probably tripped the logging by the advertising that was being blocked on the pages visited.
Dec
14
comment Sticky keys on RDP
maintaining additional persistence in other words, the machine was already hacked at a system level and they're just providing a way back in.
Dec
13
answered Can an attacker spoof an IP address to access my .htaccess protected file?
Dec
3
comment How CryptoPHP: Sneaky malware works?
Doing this has been around for a while. Simple php virus in a jpeg
Nov
29
comment Any “cleaned” virus that's been successfully re-released?
True, Code Red is a pretty good indicator for somebody bringing an old NT4 server back online. Nimda is also another infection trace from this happening.
Nov
29
comment Any “cleaned” virus that's been successfully re-released?
In that case, you would need insane operating system and software developers that introduced regression errors into their products. That has occasionally happened, but not so much anymore. You're not depending on the Antivirus software to prevent it, but the OS and software itself to have been battle hardened. So unaltered malware isn't likely to survive.
Nov
29
answered Any “cleaned” virus that's been successfully re-released?
Nov
23
revised What port services can hackers use to break into a server?
spelling on break in question and paragraph structure
Nov
23
suggested approved edit on What port services can hackers use to break into a server?
Nov
22
answered Why do credit cards have chips, if I can purchase online without the chip being read?
Nov
22
comment Why protect files with sensative information with .htacces?
@CamilStaps - it's pretty simple. Detect a foul hole in some Wordpress addon that allows you to create a .php file in a directory, then call it. The PHP interpreter merrily does your dirty work and your target's compromised. Now if your target had put an .htaccess file in place denying direct access to the file, he wouldn't be spending time doing one of those "Oh, &^#%" site reloads. Also, the PHP interpreter doesn't process .xml or other files where configuration data may be stored so once again... I'll let you peruse some web logs to discover all the attempts...
Nov
21
revised Is storing CVV compliant with PCI standards?
formatting change for clarity
Nov
21
suggested approved edit on Is storing CVV compliant with PCI standards?
Nov
21
comment Has 100+USD, accidentally
If you use it to "purchase" anything, then, yes.
Nov
20
comment Is storing CVV compliant with PCI standards?
There is no need to store the CVV or anything else if you're using a proper payment gateway. Century Business Solutions issues a token that can be accessed for future card charges by your company for the account with which it is associated. NO customer card data is stored.
Nov
18
comment How to be secure on a unsecured wifi?
Only if there's encryption or if you're using a VPN tunnel to jump to a server that provides access to the internet.
Nov
18
comment Why protect files with sensative information with .htacces?
a malicious user may still end up correctly guessing the name of this secret key file Heh, web logs are full of these guesses against security by obscurity and it must work quite well otherwise they wouldn't be so persistent. If it's blocked by .htaccess deny then it explicitly isn't available for guessing.
Nov
15
comment Truly deniable encryption
First law in forensics is to make a read-only clone so multiple tries may be attempted. Upon finding the LUKS header trashed, they'd be smart enough to put 2 and 2 together to look 4 more answers from you. They've seen enough Wile E Coyotes out there who always are trying to out-trick themselves.