Reputation
1,118
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
6 12
Newest
 Yearling
Impact
~44k people reached

Oct
25
answered Is it possible for a vulnerability in one application to be exploited to attack another application on the same server?
Oct
19
comment Is there a way to steal PHP or ASP code from a web server through the HTTP(S) protocols?
+1 Your code isn't that special. I say that merely because in my experience, there's very little code that is. In my earlier days when I cared, I spent time de-obfuscating code. It usually proved to me that I needed to do my own programming instead of wasting time "Uncovering the Hack".
Oct
18
comment UDP Out dated and insecure
Unsupported inference, list flaws.
Oct
14
comment Secure way to save password in configuration file
Where will you store the encryption key to decrypt the information?
Oct
11
comment How can i prevent my phone from spying through sms
Patch Android against StageFright 2.0, if no patch available, take a hammer to it and buy only Android products whose manufacturers provide timely Android security patches. Android is attackable through MMS or MP3 and further holes are probably waiting to be found besides StageFright for all those lost in Android's security blackhole. Vote with your currency of choice and don't buy product from manufacturers who refuse to live in the current security environment. 1996 disappeared a long time ago.
Oct
4
comment Is it possible for corporation to intercept and decrypt SSL/TLS traffic?
Them that owns the computer, owns the connection. Yes, for information infiltration/exfiltration and malware prevention, it is common to install a certificate and scan https traffic for content in company networks.
Oct
2
comment How does my ISP track me?
You can totally destroy your friend's reputation cause he'd get fingered for your online activities. Are you sure you're his friend?
Sep
30
comment Is there a reason to use TrueCrypt over VeraCrypt?
Truecrypt is no longer trustworthy for use on Windows. It is unmaintained and now can be used to attack your Windows system through recently discovered vulnerabilities. Upgrade to a maintained fork like VeraCrypt or change to alternate encryption technology.
Sep
28
awarded  Pundit
Sep
28
comment Am I legally required to give passwords or keys for encypted data during an criminal investigation?
Seek legal advice from an attorney in your country of residence / country of criminal investigation. The current correct answer is Yes/No/Maybe.
Sep
20
comment What to do when Google disables SSLv3 and RC4?
Use browsers that fully support TLS. the higher the version the better. All the rest should take care of itself.
Sep
19
comment Computer accessed by stranger through TeamViewer
Teamviewer is a two part process where two parties have to each do something to get the connection to complete. How did they trick you into doing your side of the connection process?
Sep
12
comment How to securely, physically destroy a hard drive at home?
Meh, propane torches are a dime a dozen.
Sep
12
comment How to securely, physically destroy a hard drive at home?
I've found disassembly, hacksaw or a hammer to be pretty effective on dead drives. All are cheap, disassembly allows you to use the head servo motor to mess with the platters before hammer whack.
Sep
12
comment How to securely, physically destroy a hard drive at home?
security.stackexchange.com/questions/43477/… or security.stackexchange.com/questions/11313/…
Sep
11
comment My dlink router seems to be compromised
How out of date is this thing? You don't need WRT or any other open source stuff, just the latest factory firmware if it has been patched and reload it. The reset button merely clears the configuration memory, so whatever's been flashed is still there. If properly patched firmware isn't available for reload, smash it with a hammer and send it out in the first garbage pickup so someone else doesn't get bitten.
Sep
11
comment How to know somebody's IP? (Fraud victim)
Criminal can likely find you. Given what goes on in Mexico, the better answer here is to cut your line, let the shark get away, cut your losses and stay alive.
Sep
9
comment Dangers of WAP billing?
Trust but verify... Check to see that no charge was generated.
Sep
6
comment How to destroy old credit card?
Propane torch. It will degauss the magentic strip, melt the card so the numbers are unreadable and destroy the chip/nfc components.
Sep
5
comment Can the location of a cellphone be pin-pointed?
Triangulation from 3 or more towers in a cellphone network can pinpoint the location of a phone, it was used in an emergency here to find a driver who got lost on some BLM backroads. Coordination between SAR, the local Sheriff's department and the cellphone provider used the connection information to establish an area to search.