Fiasco Labs

697 reputation

bio	website
	location
	age
visits	member for	1 year, 5 months
	seen	23 hours ago
stats	profile views	64

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?

	697 reputation	bio	website		visits	member for	1 year, 5 months
17 badges		location			seen	23 hours ago

summary answers questions tags badges favorites bounties reputation activity

125 Actions

suggestions reviews revisions comments badges posts accepts all

Jan 19	answered	Privacy in torrents?
Jan 15	comment	How can Nokia decrypt HTTPS data? Man on the Tee proxy. He's not in the middle, he's your identical twin asking for a second identical bagel.
Jan 14	comment	Will disabling the Java add-on in IE protect you from Java exploits? You don't have to uninstall it, but you also have to pray that it doesn't repair its registry key, hence Heise Security's recommendation that what ain't there ain't exploitable under IE.
Jan 12	comment	Should I be disabling Java? @ThomasPornin - We will all sell our souls to the devil for convenience.
Jan 12	comment	Should I be disabling Java? Ditch Java on anything that doesn't need it to reduce your vulnerability surface. For example, on a network of 50 computers, there probably are only 6 people who need it. Reduce your workload by locking Java down to just those workstations and you'll be much happier in the long run. Same goes for your home system. Remove it, unless your bank requires it for one of their supposedly secure applets. Java != JavaScript.
Jan 4	comment	Is there any way to crack bitlocker drive? I'm one of those belt'n suspenders type guys that finds both to be a really good idea.
Jan 3	comment	Is there any way to crack bitlocker drive? Properly designed encryption has no backdoors and no recourse upon loss of the key. Exercise the 100% hindsight gained and do backups in future.
Jan 2	comment	Can email be encrypted before it reaches the mail server? If not, is there something that would allow something like this that's being worked on? smime which requires the client to understand it. The little engine that almost could except for all the engineers messing with the drawing board.
Dec 30	comment	E-mail can be made to appear like it came from a big organization? Joe Jobbing? Has been around ever since email was invented.
Dec 25	awarded	Yearling
Dec 21	answered	Why Adobe is recommending McAfee security scan during flash player installation?
Dec 17	comment	Can a SIM card be tracked without cell phone and battery? @Polynomial Yes, usually triangulation is needed, either from fixed stations or by moving the receiving system around and using a directional antenna for most radio signals. Cell phone systems provide other interesting properties like being able to track where signal is missing, a sort of reverse radar effect.
Dec 17	comment	what is the difference between virus, worm, trojan and other malware I don't know why anyone cares about the VWT designation anymore. It's for the most part a moot point as most of the powerful threats released now are a hybrid of all three, often served off of infection servers that are able to probe the OS, installed services, and versions of plugins/browser objects; immediately calculating the top most usable vulnerabilities that particular machine has. Also, what comes in is better termed to be a loader which then phones home to determine the VWT package needed to be delivered. Arguing whether it's a Virus, Worm or Trojan is often rather a moot point.
Dec 15	comment	Can a SIM card be tracked without cell phone and battery? You can find someone off a single ping on a tower. Using signal strength maps to view local cell phone coverage, it was determined that there was only a single direction the signal could have come from as the other towers would have picked it up otherwise. It saved the person's life. Not always doable, but detective work, knowing radio paths and your local terrain can pay off immensely.
Dec 11	comment	Impact of Quantum Computers, other than new algorithms A day when fiddling goofy small potatoes stuff like factoring primes is no longer useful for encrypting data.
Dec 9	comment	Router admin password was changed, how did this happen and how to prevent Are you running WPA2? Accessing the admin interface over unencrypted wireless transmits the passwords in cleartext.
Dec 9	comment	Router admin password was changed, how did this happen and how to prevent From the forums 3400 V2 in on beta now has now block wireless access to router interface. So only the wired pc can access the router interface. Time for firmware upgrade or replacement with a router that supports V2?
Dec 9	comment	Router admin password was changed, how did this happen and how to prevent Can you lock out admin access from the wireless network?
Dec 8	comment	Are there DRM techniques to effectively prevent pirating? Most gaming systems operate under these types of setups.
Nov 21	comment	Why do we ask for a user's existing password when changing their password? Yep, convenience kills security, something we keep failing to learn. Hence entering the old password to authenticate that the person at least knows the old password. I had a period where office pranksters would get up to various devilment, the final straw being a lockout caused on a vendor website where a single account was shared company wide. It's amazing how easy it is to set up six separate accounts and keep passwords to yourselves after your days purchasing and sales information gets cut off while you play phone tag with the help desk tech on the other end. They'd a loved no barrier...