799 reputation
28
bio website
location
age
visits member for 2 years, 9 months
seen 20 hours ago

Been on the Internet since before there was an Internet. Remember UUCP, news feeds, and Gopher?


May
1
comment Why Adobe is recommending McAfee security scan during flash player installation?
Only an issue if you're running one of the competitor's AV packages and it turns out to be one that's incompatible with McAfee's particular iteration. It's been known to get in a knife fight with Kaspersky, leaving bystanders variously traumatized.
Apr
29
comment Is stripping out < and > characters an effective way of preventing XSS?
Go all the way or don't bother. The types that exploit XSS will throw a script at it that tries all the permutations. They know there are plenty "it's good enough" sites out there with barn door size holes.
Apr
25
comment Can my company see what HTTPS sites I went to?
When in doubt, use the smart-phone bypass. Freedom often has costs that are worth paying.
Apr
21
comment Is anything written in the book “Internet Denial of Service: Attack and Defense Mechanisms” c2004 still valid?
As applicable as buying a book on Windows XP SP1. Current to the time, but so much has happened since then, even if you're still running Windows XP.
Apr
16
answered If someone hacks my wi-fi connnection, what can they see and how?
Mar
25
comment Keyloggers - Ports used by keyloggers
One even used calls to a fake DNS to pass traffic. Hey, everything needs DNS to function. Ooh, look open firewall ports on 53.
Mar
17
comment Hiding emails from Google
Don't use Google GMail. Just that simple. Let some other service read your email. Or find a service that uses smime and exclusively use that for correspondence.
Mar
13
comment What is nuke it from orbit?
"We must destroy the village in order to save it" = MilSpeak for The Viet Cong have so infiltrated everything that we can no longer differentiate between friendlies, civilian bystanders and enemy combatants. Which meant, "Call in the BUFFs for a complete carpet bombing to erase it." Same thing goes with a really complete virus/malware pwnage, burn it to the ground to kill the anthrax and start again.
Mar
7
comment How do I get my Encryption Certificate back?
Encryption sounds like a really good idea until you learn to backup your encryption keys. Then it becomes a really good idea. Potential usefulness vs. actual usefulness hinges on this one concept.
Mar
7
comment Site constantly getting infected
Just had a Typo3 notice come in from Secunia today notifying of a MySQL injection vulnerability. It may be something new that hasn't been patched.
Mar
4
comment Site constantly getting infected
So the items shared in common between the two websites are the workstations used to manage them and the software platform they run on.
Mar
4
comment Site constantly getting infected
Also, check every workstation used to access the site for keyloggers and other malware. Once they're shown to be infection free, change ALL login credentials. DO NOT use telnet or ftp for access, their credential exchange is plaintext. Then start thinking about whether your hosting provider is actually secure. Shared hosting = shared filesystem = shared vulnerabilities. Once these bases are covered, go to Typo3 and update to the latest software, then check their forums for known security bypasses.
Mar
2
revised Stack Overflow is www.doioig.gov/? If not, then could I be infected
valid link note:
Mar
2
answered Stack Overflow is www.doioig.gov/? If not, then could I be infected
Feb
22
comment Does disabling right click have any impact on security?
The all-time favorite time saver... You come across an image that's displayed at full resolution on the web... You're running Windows 7... Easier than rubber-banding a lamb for wetherization purposes, we give you the Snipping tool. Instantly castrates any right-click silliness or image protection silliness in one simple drag.
Feb
9
comment How to deal with a person who gets easily fooled by internet and mail scams?
Yep, we've sandboxed our special guys pretty well. I just mention the firing thing because too many times that's thrown out there by technically savvy but socially inept people who often contribute far less to the company than their egos realize. Least right user accounts are especially useful for everyone going into uncharted territory.
Feb
9
comment How to deal with a person who gets easily fooled by internet and mail scams?
@LucasKauffman - Exactly. There's far more involved than a few stupid infections. Something that getting an iPad or iAnything will never fix. Most fraud is a direct hack on users and aside from video display involves no computer clock cycles whatsoever.
Feb
9
comment How to deal with a person who gets easily fooled by internet and mail scams?
@tylerl - It's taken 10 years to accomplish 0 with two of our high end employees. Ignorance and arrogance says to just fire them. The bottom line they bring in, in their area of expertise and what they bring to the company says to fire the person stupid enough to think it's an option.
Feb
8
comment February 7th 2013 Facebook integration error implications
Not available = high security. Nobody can access it, so it's thoroughly safe. Basically, all unified login systems promoted will have this problem. if the service goes out, no access.
Feb
8
comment February 7th 2013 Facebook integration error implications
Facebook Connect login service was failing to deliver, people using their third party login method weren't able to connect. Failure to connect isn't a failure in security, rather the opposite, it's so secure you can't access anything. Kind of along the lines of an Outlook/Live/Hotmail outage, if you don't use Hotmail, you probably didn't know or care.