799 reputation
29
bio website
location
age
visits member for 2 years, 9 months
seen 4 hours ago

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


Jun
2
comment Does Disabling Right Click In Windows Explorer Do Anything?
Espeically if no gpo rules have been put in place to disable doing the right menu functions by other means. It merely inconveniences casual users, the computer literate just go ahead and do what they need to do, especially if they're supposed attackers. For the most part, I give the IT dept the mental middle finger and do what I need to get the job done.
May
31
comment Can the use of GPS devices leak personal identifiable information?
The received GPS signal is pseudo-random noise below the noise threshold. At the position GPS satellites orbit, you're going to need a directional dish and some power to get enough signal out there for the satellite to hear, if it had that capability. It doesn't.
May
19
comment Does using an http proxy completely hide my real IP address?
@pacerier - Just like you can't be certain about hiding your internet tracks. Too many variables, one messup and you've sprung the trap.
May
17
comment How was Lulzsec caught?
Hubris, being half as smart as you think you are (being extremely clever and having a high IQ is not the same as being wise), keeping up a high profile that begs for a nation-state to come kick your sit-upon. The nail that sticks up will be hammered down. All of these allow profiling which means that digitally covering your tracks doesn't cover your tracks. Statistical analysis kicks in and you get pwnd by your local friendlies.
May
15
comment How can I find the malicious/backdoor codes without knowing the last modified date?
File dates are a really poor indicator. The best way is to do a system wide diff against the files in a known good backup and see from that what php code has been changed. Note that this doesn't even begin to address any CMS code stuck into the database.
May
12
comment Disk Erasing Security - Odd Number of Writes
Citing ancient literature for old servo motor head technology with GIANT inter-track spacing is cargo cult programming practice. Times have changed and other issues are more pertinent.
May
11
comment Can a cracked antivrus software do the job?
Local jerk here used a similar scam as a means of passing around RAT software. Brought to you by your local chapter of "Trust-a-Crook". If they'll steal from others, they'll steal from you.
May
8
comment Is it compulsory to have https on e-commerce site?
You'll have to perjure yourself while taking the PCI SAQ-D self assessment if you don't. And if anything goes remiss, you'll be facing fines from your credit card processor along with having your ability to process credit cards being suspended.
May
1
comment Why Adobe is recommending McAfee security scan during flash player installation?
Only an issue if you're running one of the competitor's AV packages and it turns out to be one that's incompatible with McAfee's particular iteration. It's been known to get in a knife fight with Kaspersky, leaving bystanders variously traumatized.
Apr
29
comment Is stripping out < and > characters an effective way of preventing XSS?
Go all the way or don't bother. The types that exploit XSS will throw a script at it that tries all the permutations. They know there are plenty "it's good enough" sites out there with barn door size holes.
Apr
25
comment Can my company see what HTTPS sites I went to?
When in doubt, use the smart-phone bypass. Freedom often has costs that are worth paying.
Apr
21
comment Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid?
As applicable as buying a book on Windows XP SP1. Current to the time, but so much has happened since then, even if you're still running Windows XP.
Apr
16
answered If someone hacks my wi-fi connnection, what can they see and how?
Mar
25
comment Keyloggers - Ports used by keyloggers
One even used calls to a fake DNS to pass traffic. Hey, everything needs DNS to function. Ooh, look open firewall ports on 53.
Mar
17
comment Hiding emails from Google
Don't use Google GMail. Just that simple. Let some other service read your email. Or find a service that uses smime and exclusively use that for correspondence.
Mar
13
comment What is nuke it from orbit?
"We must destroy the village in order to save it" = MilSpeak for The Viet Cong have so infiltrated everything that we can no longer differentiate between friendlies, civilian bystanders and enemy combatants. Which meant, "Call in the BUFFs for a complete carpet bombing to erase it." Same thing goes with a really complete virus/malware pwnage, burn it to the ground to kill the anthrax and start again.
Mar
7
comment How do I get my Encryption Certificate back?
Encryption sounds like a really good idea until you learn to backup your encryption keys. Then it becomes a really good idea. Potential usefulness vs. actual usefulness hinges on this one concept.
Mar
7
comment Site constantly getting infected
Just had a Typo3 notice come in from Secunia today notifying of a MySQL injection vulnerability. It may be something new that hasn't been patched.
Mar
4
comment Site constantly getting infected
So the items shared in common between the two websites are the workstations used to manage them and the software platform they run on.
Mar
4
comment Site constantly getting infected
Also, check every workstation used to access the site for keyloggers and other malware. Once they're shown to be infection free, change ALL login credentials. DO NOT use telnet or ftp for access, their credential exchange is plaintext. Then start thinking about whether your hosting provider is actually secure. Shared hosting = shared filesystem = shared vulnerabilities. Once these bases are covered, go to Typo3 and update to the latest software, then check their forums for known security bypasses.