Reputation
1,363
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
6 12
Newest
 Yearling
Impact
~48k people reached

Feb
26
comment In light of the glibc DNS vulnerability, why aren't Linux distros updating install images?
For the same reason Windows and Macintosh install archives aren't updated... And those companies have the paid workforce to do it. Always start anything up behind a firewall, and run system update as the first or second operation the system will execute no matter what your choice of poison.
Feb
22
comment What are the appropriate steps to take after installing a questionable Android app?
Older versions of Android OS and some of the newer exploits, a hammer. And after that only buy devices that the manufacturers take an interest in keeping up to date.
Feb
17
comment GNU C Library getaddrinfo() Flaw
Ubuntu patches arrived today and fairly immediately. Shouldn't be too big an issue on well maintained Linux distributions.
Feb
16
comment Why can't Google Forms be used for elections?
Vote early and vote often...
Feb
14
comment Shrewsoft VPN client calling home?
Update notification.
Feb
7
comment Is it dangerous to call spam phone numbers, even if you know they're spammers?
A side-effect if the phone number is in your country is being added to a "sucker list" that gets resold among the boiler rooms, something quite common for elderly who respond to various con schemes. Respond to one call, get hit with a permanent barrage to the point that your phone number needs to be changed.
Feb
7
comment The problem I have with wikipedia showing IP addresses to the world?
We not be the arbiters of website policy. Their policy, no anonymous editing. Freedom of the press belongs to them what owns the press. Create your own anonypedia with your own policy. Or register your account.
Feb
4
comment While working from home, is it a bad idea to give the company you work for your IP address?
So I can put you in my development environment server's IP whitelist. You want control of your access, I want control of my access. It's a mutual protection thing. Even higher restrictions apply to the staging environment. I might not trust you enough to give you access there.
Feb
3
comment Can the identity of a person in Nigeria be confirmed?
Get hold of your bank and any other financial institutions you are involved with and tell them that your husband's a live one on the line with a con-artist and has swallowed it hook, line and sinker. This is an intervention type situation that needs to be nipped in the bud before much more than $100 escapes out the door. Cons tell a convincing story and many's the mark out there that finds out too late that faith based decision making can be fatal in many ways. The family lawyer, if you have one needs to get a heads up as well.
Feb
3
comment Can the identity of a person in Nigeria be confirmed?
Also, if they provide Linked-In pages showing the company they work at, take it and any information contained within with a grain of cyanide... At least you won't miss your bank account afterwards.
Feb
1
comment PCI Compliance Scan Failing for supporting TLS 1.0, but removing support breaks < IE 10
@munchkin - and as of now, Microsoft thinks the same, no more security updates for anything earlier than IE 11.
Feb
1
comment Detecting skimmers and other ATM traps
Newest form of skimmers are parallel read mylar shims for chipped cards. They're totally invisible as they slide into the slot. Their contacts overlay the card reader contacts.
Jan
31
comment Why does an overload of requests give one root access all of a sudden?
Sounds like one of those FOAF things, direct link to peer reviewed content where somebody actually did it, or it didn't happen.
Jan
9
revised How does resetting passwords twice increase security after a breach?
added 335 characters in body
Jan
9
answered How does resetting passwords twice increase security after a breach?
Jan
4
comment What was behind the surge of Adobe Flash Player vulnerabilities/patches in 2015?
A lot of chickens coming home to roost over all the time Flash has been in operation. And 2015 was the year of the big coop cleanout shovel to remove what chickens convert bugs into. Despite that, Flash still is being patched for nasty bugs.
Jan
3
comment Where can I get a list of “bad” IP addresses that are likely to be used by attackers or spammers?
Given the moving target of compromised servers, individual computers, all addresses are a possible attack source. There is no such thing as a trusted source on the internet. While you might put a permanent block on netblocks like the RBN, it's only a small subset of potential attack vectors
Dec
28
comment Is Telegram secure?
History bears out that Telegram's "Roll your own Security Spliff" produces dreams of protection. Seriously broken and not theoretically so...
Dec
27
revised Can I prevent my ISP from accessing my network if I change my router config?
update
Dec
27
revised Can I prevent my ISP from accessing my network if I change my router config?
homehub