858 reputation
210
bio website
location
age
visits member for 3 years
seen yesterday

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


Sep
27
comment Is replacing bash with another shell a prudent step?
planet should be plane. Basically all the planes coming back had not been hit in the fuel tanks, engine nacelles, bomb bay, aft near the empennage controls, or cockpit area. Statistical shadow shows vulnerability, eh? It was the opposite of what could be visibly measured.
Sep
27
comment Someone keeps using my email address. What to do?
Who did you tick off? Pretty common tactic... and nothing you can do about it. At least they didn't sign up enough trial subscriptions and free catalogs to need a mail truck to deliver the payload.
Sep
27
comment How to decode this exploit scanner?
Remember looking at an early ecommerce software package written for webservers that didn't have php installed. Kind of gave me the willies at the time that it would install php where it could be publicly accessible. Violates security on so many levels.
Sep
24
awarded  Autobiographer
Sep
23
comment Why is security through obscurity not a good option for encryption?
To quote Schneier's observation: Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can't break. Often security by obscurity falls under this because with increasing use, things get noticed. And the underlying message traffic doesn't withstand statistical analysis, so it ends up being soul salve that bitterly proves to be useless.
Sep
14
comment Tiny USB sticks
Expecting a USB stick to be "too small for a virus" is a pretty far reach. A virus to steal your stuff will be pretty insignificant in size. This security ploy needs a rethink, I'm thinking.
Sep
7
comment How can I prevent my E-mail address from being used as the sender for fraudulent/scam messages?
Also, check Facebook for people who work at your company. You'll be surprised to find 20-50 Nigerians have a secret branch office there with all sorts of amazing work credentials. FB doesn't give a coprolite about this either. "The Internets" were never created to have factual integrity in mind.
Sep
7
comment How can I prevent my E-mail address from being used as the sender for fraudulent/scam messages?
When you find a means of preventing "Joe Jobbing" please let us know.
Sep
1
comment Nowadays, what is the difference between Cyber Security and IT Security?
Cyber Security prevents attack by the Cyber Men... Seriously, it's just one of those phrases that sounds good, invented by a think tank to help sell an idea. Till Cybernetics is fully implemented and we're all wearing implants, it's kind of meaningless.
Aug
21
comment how to wipe RAM in Windows 7
Turn the computer off and wait 15 seconds?
Aug
2
comment Is Linux really that secure, with only root password denying external access?
The root/superuser/administrator password is often the only barrier on a lot of OS's, so...
Jul
31
comment How do hacking groups register domains remaining anonymous?
Step 1. in either. Understand that a large amount of the exit nodes can be compromised at any one time (Jul 2014) and that Russia is looking for several different ways of cracking the system besides providing exit nodes. NSA is only one of many who are honeypotting for your paranoia.
Jun
23
comment Hardware trojan besides network card?
They can be installed in anything with storage ability. And you can communicate with them via any communications you so wish, so having the NIC only stipulation is kind of a red herring.
May
11
comment Can a sysadmin spy on a Wifi connection?
Yes, they probably are able to. Chokepoints and all that. Do they care? Probably not. Depends on if you're at work skiving off and in a jurisdiction that feels the employer paying for the equipment and telecommunications costs is in control of the traffic generated by their employees. If you're at work, you probably need to keep your use to work related content.
Apr
11
comment Why can't we create a new SSL implementation?
+1 on the maintenance. Something along the lines of it's easy to do encryption, getting it right is extremely hard.
Apr
11
comment Why can't we create a new SSL implementation?
One of those Schneier rules. You come up with an amazing, new, efficient encryption standard to replace those 40 others who are showing their age. Congratulations, you now have 41 encryption standards... So the new implementation will just be another one in a list in the end.
Apr
11
answered How can I confirm that my server is protected against HeartBleed?
Apr
10
comment Why wasn't heartbleed fixed before?
Nature of the game, you don't know till you test, and until you start thinking nebulously and hit on it, you don't know it's there. Can't be fixed till you know... No majik to it. Some bugs have been in for decades till someone said to themselves, "what if I ask it to do this?"
Mar
25
comment Does a stolen phone mean losing access to Gmail?
He who owns the phone, owns the account. It's all in the nature of tying authentication to a device. And there is no security if the attacker has physical access to the device, whether it's a server or a smart phone.
Mar
1
comment Why do some people think Linux is more secure than Windows?
@audiFanatic "probably" have the wrong person, check the Marked as Duplicate banner.