Reputation
1,363
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
6 12
Newest
 Yearling
Impact
~48k people reached

Mar
27
comment Internet of things is what exactly?
@AndréBorie - Yes, it's serious enough that iOS needs to be taken away from Apple and IoS repurposed for its true definition as I don't think the situation will go away any time soon. Profits and human nature get in the way. Also, AI will be good for humankind if Tay is any indicator. The earth will finally know peace when AI reaches the ultimate "Final Solution".
Mar
26
comment Internet of things is what exactly?
Well, therein lies the issue. What are you doing with the Raspberry Pi, BeagleBone, Arduino or any other number of internet connected microprocessor systems? It ranges from highly complex industrial grade with security to bone dead simple. And so the whole thing is quite nebulous as a definition at this point. Is a internet controllable power strip an IoT device based on whether it's an http server controlled, password protected microprocessor device or a mini-computer controlled device that can use SSH/HTTPS and accepts certificates for authentication, authentication, audited access control?
Mar
26
answered Internet of things is what exactly?
Mar
26
comment If someone hacks my wi-fi password, what can they see and how?
They would see the same thing that they would see if they snuck into your house and plugged their laptop into your ethernet hub with an ethernet cable. And could either sniff traffic or directly connect to any computer on your network allowing them to do anything they wanted.
Mar
24
answered Can an attacker listen to a DSL signal by calling telephone?
Mar
22
comment Is the password FFFFFggggg&&&&&22222 safe from being guessed?
Regular, repeated patterns are always a bad idea. It's what got Enigma cracked.
Mar
19
comment What security features should a smart TV have?
The most important would be a guaranteed 5 year upgrade period from the manufacturer for patching any exploitable vulnerability in the smart TV's operating system. A little something you can't get for your Android or iThing fondle slabs.
Mar
18
comment Why does Telegram not use end-to-end encryption?
Not too big a worry as Telegram has already been shown to have garbage encryption.
Mar
14
comment What is a decoy-server?
You're welcome!
Mar
14
revised What is a decoy-server?
added explanation
Mar
14
comment What is a decoy-server?
Yep, another term for it is man-trap. As to what it does, that's dependent on what you are trying to do. It is named to sound important, equipped with services that appear to be vital and can be used to trap hacking attempts, monitor hacking attempts to see what techniques and which services are being targetted.
Mar
14
answered What is a decoy-server?
Mar
12
comment Relative merits and risks of encryption and OS security
There is always somewhere that the data has to exist in a plaintext state. Encryption is an attempt to reduce that state to a bare minimum. The attack points shift from being able to read the drive on a system (by either drive removal or booting alternate OS) to needing the system to be up and running (OS drive level encryption) and finally the software being up and running (Application/Database level encryption). What encryption protects shifts. So an OS Level encryption can be bypassed by attacking the operating system, Application level by attacking the application.
Mar
7
comment How can I protect myself from “ransomware” attacks like the one that affected Transmission users?
Multiple versioned backups = Another method along side Time Machine. This will be seen more often among ransomware, it attempts to encrypt your Time Machine backups
Mar
7
comment How can I protect myself from “ransomware” attacks like the one that affected Transmission users?
Defense in depth is the only way to handle this issue, but the detection rates on some of these ransomware packages indicate their developers are doing a good job at breaking the security illusion by changing faster, exploiting OS/Application vulnerabilities sooner. Which means that often the only thing in the AV package protecting you is its heuristics algorithms. So at the base, you'd better have the backup system as your core defense.
Mar
7
answered How can I protect myself from “ransomware” attacks like the one that affected Transmission users?
Mar
6
comment How do you remotely BOF without knowing source code?
BOF = Buffer Overflow?
Mar
2
comment Are there any downsides to using Let's Encrypt for a website's SSL certificates?
90 days screams fly-by-night, why increase the workload. Plus they depend on time, not the usual CRL methods for revocation and that's already been taken advantage of with a blowoff excuse that revocation wasn't really needed. While you can revoke your own cert, there's need for criminal activity revoke.
Feb
27
comment Why does a CDN server need my IP address to let me download a video?
Also in related networking 101, why does anyone need my IP address so we can establish direct, unproxied IP communications between two computers.
Feb
26
comment How is it possible to do TLS through proxy without anyone noticing?
Yep for basic proxies, CONNECT is a tube punched through the proxy. I can see who you connected to, but not see any traffic or know who you connected to after that initial connect, unless your DNS resolution leaks.