858 reputation
210
bio website
location
age
visits member for 2 years, 11 months
seen 22 hours ago

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


Nov
3
comment Is blocking a country's access to a website a good measure to avoid hackers from that country?
As long as they're not smart enough to use VPN and proxies. Often as effective as the Maginot Line was at keeping the Germans out of France in WWII. There's always a way around.
Nov
2
comment Continued Use of Kerberos
Can verify that. At one time Kerberos authentication over VPN to Windows Server 2003 would die if the packet size was too large due to VPN overhead causing packet fragmentation.
Oct
28
comment What are the insecure Protocols in terms of PCI DSS
+1 for FTP et.al. If you're using a plaintext service with an insecure, hackable client to access your e-commerce website, you've already lost the battle.
Oct
25
comment Google Chrome browser warning for goo.gl
Because at this time, it is highly probable that shortened links are malicious. Until these link shortening services start scanning their own product and eliminating malware links proactively, the problem will only get worse.
Oct
25
revised bit.ly is not safe and an attack page?
bit.ly needs to fix their own apple cart.
Oct
25
answered bit.ly is not safe and an attack page?
Oct
25
comment Is bit.ly a malware distributor?
bit.ly is just a good link obfusticator and so therefore like most sites that do link shortening, their service is a magnet for malware distributors that want to disguise links to their infection engines and email phishing schemes that need something to hide behind.
Oct
25
comment Why don't major browsers currently support TLS above version 1.0?
Comment relevant to a point in time.
Oct
18
comment TrueCrypt Data Recovery
Snapshot the hard drive in case the "allergic" tools manage to make the files unrecoverable.
Oct
11
awarded  Custodian
Oct
11
reviewed Approve PHP sprintf vulnerability?
Oct
11
revised PHP sprintf vulnerability?
Added information and link to CSI lecture notes
Oct
11
answered PHP sprintf vulnerability?
Oct
11
comment PHP sprintf vulnerability?
@Gerifield - Yep, given that perl and php which is related to it are based on a subset of C conventions, there is an issue of inheritance.
Oct
11
comment PHP sprintf vulnerability?
If you include unfiltered user content as the input, you're enabling XSS. Taint has to be removed.
Oct
8
comment How do I encrypt the source and destination IP address, along with various parts of an email?
Encrypting TCP/IP addresses, heh, how's transport supposed to work? Black felt marker to redact after printing out with headers included, put in sealed envelope and send by registered mail.
Sep
30
comment Passwords in plaintext?
You've basically compromised your own device. Yes, you can see the login credentials, this is what happens when you decrypt SSL traffic. A packet sniff of what went over the wire would show encrypted traffic.
Sep
30
answered Virus/Malware: Force Java Download
Sep
30
comment htaccess hacked
All FTP logins send login credentials as plaintext. Use SCP/SFTP instead. And as the article notes, don't store login credentials in the client, it's just waiting to be scraped.
Sep
28
comment Is it noticeable when you take a copy of a website?
For those who actively fight scraping, usually, it just gets you a sand trap ban where you get molasses response or an outright IP ban that may be temporary or permanent. In the old days of email scraping, some website owners would send you to a honeytrap that spewed garbage. And yep, it's all logged...