1,028 reputation
411
bio website
location
age
visits member for 3 years, 6 months
seen 20 hours ago

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


Jun
27
revised What is the difference between ASA 5505 Security Appliance and without Security Appliance
added 105 characters in body
Jun
27
answered What is the difference between ASA 5505 Security Appliance and without Security Appliance
Jun
25
comment Why do we still use the terms SSL and HTTPS?
HTTPS never meant HTTP-SSL, that is an assumption that doesn't follow the RFC. SFTP => Secure FTP not SSL-FTP.
Jun
5
comment How to disable a trail camera with a laser
This is one of those "consult your lawyer" legal matters. Pointing a surveillance camera through your neighbor's bedroom window has certain ramifications. On the bright side, the reviews for that particular camera say its kind of dodgy, poor night images and flaky triggering at 30 feet. Could always buy one and see how poor the infrared filter is, then you could do an invisible, non-invasive IR counterattack. NOTE: Infrared only works as well as the camera's UV/IR filtration works. Good filtration/iris system, no point. Pointing a laser? Pfft. It will get three good identifying shots of you.
Jun
3
comment What are these strange emoji's/characters and why do I keep seeing them?
UTF-8 characters your web browser cannot display because you don't have a font installed that has that particular codepoint. Bet it would show if you had access to a Linux distrubution. Looks to be 03eb => ϫ or 3eb0-3ebf which you can view in Character Map if you use the MingLiU font.
Jun
3
comment Why is a password accompanied by a username deemed 'safer'?
This would be a beautiful system to do a dictionary attack against, all you have to solve is the password and you own every account that matches, more safe because there could only be one password1 and therefore only one account would be compromised on that match.
Jun
2
comment Can expired credit card information be used for fraud?
Easy to guess expiration dates, so if the person hasn't moved and the card number hasn't been reassigned, yes, it would be fairly easy to guess a new expiration date off the old one (months don't usually change, depending on the account, year usually increments 2-5 years) and place orders with it.
May
26
comment How do Travel Sentry locks work? (supposedly openable only by security agencies)
Security theater for your luggage... Looks like a lock, opens... ahem... no that's too crude.
May
24
comment Why is writing zeros (or random data) over a hard drive used when writing all ones is more beneficial?
Writing zeros or writing ones still entails writing the full sectors back to the disk. The operative being that you are creating a Manchester encoded ECC data stream that is being written to the hard drive surface, not just attempting to demagnetize it.
May
13
comment Would my protocol be safe?
Schneier's law will come quickly into focus here. It's incredibly easy to do encryption/secure transport badly and incredibly hard to do encryption/secure transport well. Choose something well tested or become a statistic. To put it another way, you can through much hard work, come up with something that you can't hack, but is found open to the wide world when others analyze it.
Apr
26
comment Methods to have multiple Anti Virus installed on one machine
In order to prevent infection, modern antivirus packages tap into the operating system at quite a low level. One package doing this is ok, two packages trying to do this may work for an hour or two if you can get it to function, but somewhere along the line they're going to get into a gunfight over system resources and induce possible heavy collateral damage. One goodie is the McAfee scan that gets installed with Adoobie Flash (what are they smoking?) every so often either disabling the much better anti-malware/virus package you paid for, causing system performance problems or lockups.
Apr
26
comment Is browsing http sites insecure?
Against getting malware? Probably not. And anyone doing a packet sniff can see cleartext of what you're reading, and your posts, hmm, they can also see your posts after you've saved them as well... nevermind.
Apr
14
comment If I DDoS through a VPN, will they be able to resolve the attack to me?
How do you do a Distributed DOS through one single connection, expecting to use it as C&C on a bunch of bots. A single VPN connection is a soda straw otherwise and you're just embarrassing yourself.
Mar
29
comment Why Adobe is recommending McAfee security scan during flash player installation?
Nothing at all, just personal preferences, Chrome and Firefox are often open side by side anyway during dev along with the IDE and a Virtualbox VM running the Linux server. Joy of running an i7 with plenty of memory and screen realestate.
Mar
28
comment Why Adobe is recommending McAfee security scan during flash player installation?
When that is offered by your Adobe Flash upgrade screen instead of McAfee... And as of late in 2015, Chrome is more secure than Internet Explorer. Back in 2012, Chrome was having some issues as well. Disclosure: Chrome is my major goto of choice for iffy websites, Firefox for dev features I like that are sometimes more user friendly than Chrome and IE as webdev compatibility tester and very little else.
Mar
28
awarded  Necromancer
Mar
1
comment Vega Scanner Took Website offline?
You used a security vulnerability scan tool to scrape social data? Be aware that anyone paying attention to the logs will start serving you a permanent 403.
Feb
26
comment Can anyone predict the scope of security in the year 2030?
Well, we hope it gets better? Given the advancing complexity of OS/program interaction, we know an enormous amount about what doesn't work, but everytime somebody announces they've got a handle on providing secure environments, yet another genius finds a new way to attack that sidesteps a lot of assumptions. IOW, no answer for something that's 15 years away. We already know the IOT is severely broken, with growth and watching the bottom line on expense by people who're creating the tech, the door's wide open.
Feb
22
comment Similarly to How Photos Have Meta Data, Does Audio As Well?
MP3 files are tagged with meta data.
Feb
20
comment Tamper proof hardware - not resistant
Old engineer's rule, "It is impossible to make anything foolproof because fools are so ingenious." Or to put it another way stated by a former boss, "I find his incompetence truly amazing, he's the only person I've ever seen break a ball bearing with a broomstick."