769 reputation
28
bio website
location
age
visits member for 2 years, 7 months
seen 23 hours ago

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


Mar
7
comment How do I get my Encryption Certificate back?
Encryption sounds like a really good idea until you learn to backup your encryption keys. Then it becomes a really good idea. Potential usefulness vs. actual usefulness hinges on this one concept.
Mar
7
comment Site constantly getting infected
Just had a Typo3 notice come in from Secunia today notifying of a MySQL injection vulnerability. It may be something new that hasn't been patched.
Mar
4
comment Site constantly getting infected
So the items shared in common between the two websites are the workstations used to manage them and the software platform they run on.
Mar
4
comment Site constantly getting infected
Also, check every workstation used to access the site for keyloggers and other malware. Once they're shown to be infection free, change ALL login credentials. DO NOT use telnet or ftp for access, their credential exchange is plaintext. Then start thinking about whether your hosting provider is actually secure. Shared hosting = shared filesystem = shared vulnerabilities. Once these bases are covered, go to Typo3 and update to the latest software, then check their forums for known security bypasses.
Mar
2
revised Stack Overflow is www.doioig.gov/? If not, then could I be infected
valid link note:
Mar
2
answered Stack Overflow is www.doioig.gov/? If not, then could I be infected
Feb
22
comment Does disabling right click have any impact on security?
The all-time favorite time saver... You come across an image that's displayed at full resolution on the web... You're running Windows 7... Easier than rubber-banding a lamb for wetherization purposes, we give you the Snipping tool. Instantly castrates any right-click silliness or image protection silliness in one simple drag.
Feb
9
comment How to deal with a person who gets easily fooled by internet and mail scams?
Yep, we've sandboxed our special guys pretty well. I just mention the firing thing because too many times that's thrown out there by technically savvy but socially inept people who often contribute far less to the company than their egos realize. Least right user accounts are especially useful for everyone going into uncharted territory.
Feb
9
comment How to deal with a person who gets easily fooled by internet and mail scams?
@LucasKauffman - Exactly. There's far more involved than a few stupid infections. Something that getting an iPad or iAnything will never fix. Most fraud is a direct hack on users and aside from video display involves no computer clock cycles whatsoever.
Feb
9
comment How to deal with a person who gets easily fooled by internet and mail scams?
@tylerl - It's taken 10 years to accomplish 0 with two of our high end employees. Ignorance and arrogance says to just fire them. The bottom line they bring in, in their area of expertise and what they bring to the company says to fire the person stupid enough to think it's an option.
Feb
8
comment February 7th 2013 Facebook integration error implications
Not available = high security. Nobody can access it, so it's thoroughly safe. Basically, all unified login systems promoted will have this problem. if the service goes out, no access.
Feb
8
comment February 7th 2013 Facebook integration error implications
Facebook Connect login service was failing to deliver, people using their third party login method weren't able to connect. Failure to connect isn't a failure in security, rather the opposite, it's so secure you can't access anything. Kind of along the lines of an Outlook/Live/Hotmail outage, if you don't use Hotmail, you probably didn't know or care.
Jan
31
comment Is using the same password for multiple TrueCrypted volumes safe?
Domino Theory - As one falls so fall all the others. Make it easy for your attacker, they deserve a break.
Jan
22
comment If email is insecure, why do we use it for password resets?
Any other means I've seen used is even less secure. So basically, you use what you've got.
Jan
22
comment Can law enforcement track a criminal through dynamic IP address?
It will require legal means. In the case of DSL or Cable ISPs, they will have logging that ties the dynamic IP to the modem HMAC which gets recorded during provisioning. From this, you can find the billed party and their home address. Good luck if it was WiFi through an open access point though.
Jan
21
answered How is it possible that a virus can infect the system if the browser is started with non-admin rights
Jan
20
comment Law & Ethics - I'm not be breaking the law its the computer
Keep in mind that judges are trained to see through elaborated stories and excuses. Hence the saying "He's so sharp, he'd cut himself." Many's the time I've seen a case built on Rube Goldberg logic collapse because someone out-tricked themselves. Wile E. Coyote is funny in cartoons, not so funny if you've personally played the role in real life.
Jan
20
comment Privacy in torrents?
Not only do you want to be assured no logging occurs, you also will need assurance that your ISP isn't logging and doing traffic pattern analysis.
Jan
20
comment Privacy in torrents?
Exactly... Which is why the recently announced BitTorrent proxies. Given the way BitTorrent works, I'd want to do a lot of probing to make sure ALL the BitTorrent traffic is really being proxied.
Jan
20
answered Law & Ethics - I'm not be breaking the law its the computer