Reputation
1,038
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
4 12
Newest
 Caucus
Impact
~37k people reached

Aug
19
comment What is one way to verify emails of compromised website if registrations are not validated?
dating services to married men sb people in relationships looking for other relationships if you've ever been bombarded by their ads.
Aug
19
comment How to block detour programs that bypass firewalls?
And if you successfully ban zenmate, there's always another waiting in the wings.
Aug
15
comment Is using my phone number as a pin for a phone a security risk?
If it's known data about you, it isn't a password or pin. Just that simple. It's why all those secondary security questions are suspect. If it can be found on your facebook page or is known by your friends, business contacts, etc. it isn't secret. These are the first things somebody skilled in "social engineering" will try.
Aug
15
comment How safe are data you dial to a call center?
@OlegMazurov - old office trick, if the DTMF can be heard during dialing, the phone number is not a secret. Same goes for any PinPad you come across that has DTMF feedback. If it's not a simple bip to tell you the key has been pressed, it's data exfiltration.
Aug
14
comment Is a server which FTP credentials were kept in a machine with Firefox being used compromised after the latest firefox vulnerability?
In SSH, the public key resides on the server. You distribute the private keys to each person who will be accessing that server. They are stored in authorized_keys. A technical detail maybe, but somebody stealing this key can access your server SSH account, if you generated it without a passphrase or a weak one, bad dog, they have access now that they have the key.
Aug
13
comment Is a server which FTP credentials were kept in a machine with Firefox being used compromised after the latest firefox vulnerability?
@freedom Harsh fact, the transmission is secure, the storage isn't. Open a .ppk file in notepad, on Linux, open authorized_keys and authorized_keys2 in nano. Guess what I was doing this weekend, long before the question was asked?
Aug
12
comment Is a server which FTP credentials were kept in a machine with Firefox being used compromised after the latest firefox vulnerability?
Good, secure transport cures a lot of ills. The vulnerability had free rein to read or write files so any computer running Firefox could have been compromised during the period it was run unpatched with only a possible message warning that the js pdf reader might not display correctly and to open in an external reader. And then depending on their target, Ukrainian cyberwar against Russia, Ukrainian separatist cyberwarefare against Ukrain or Ukrainian Cybercriminals? We don't know yet whose servers were being targetted at first, but I'd presume everyone now as it's escaped.
Aug
9
comment Ransom attacks - can I protect myself by encrypting all my files?
They'll just reencrypt your encrypted files...
Aug
8
comment Virus/Malware: Force Java Download
Change that "I suspect is a fake" to "I know is a fake"... Yes, this is a common tactic for Java, Flash by malware exploiters. They depend on people having come to recognize that both are security holes needing constant upgrade and therefore hope to bank off the possible confusion that follows.
Aug
7
comment Why do phishing emails have spelling and grammar mistakes?
Cybercriminals don't necessarily have a good education, or speak the primary language of the email as a second language on the generic garbage spam. Most of the quality phishing email out there doesn't have these issues and is often indistinguishable at first glance from whatever corporation is being spoofed. Targeted spearfishes will be by people who have studied internal documents and communications flow and will attempt to closely emulate the education level of the person they wish the email to appear from, including the types of mistakes they would make.
Aug
5
comment Can Anti-Virus Software Detect PDF Files with Viruses
As long as they've got the drop on the virus and it hasn't polymorphed into something unrecognizable.
Aug
2
comment How to block users from downloading files
So, you block a few sites, then they proxy, now you have to figure out how to block proxies, the list goes on. A capable router might have bandwidth throttling or network access reporting per IP/MAC. Find the offender and have them pay for the downloads, time for kids to start earning their access so they're ready for the real world.
Aug
2
comment Stalking and harassment
Proof or else its paranoia. Belief isn't enough.
Jul
25
comment Is it safe to use my personal password as my password in work related accounts?
No, it isn't. Single point of failure. One ring to rule them all and all that. The first assumption in hacking is that the mark is doing exactly that, using the same password everywhere.
Jul
24
comment Why does SQL not escape/sanitize by default?
SQL needs to store stuff sent to it without corrupting it. Use prepared statements and the issue becomes moot.
Jul
23
comment How dangerous is checking email on open Wi-Fi network
You are using an email service that transmits email using TLS encryption whether its imap, smtp, pop or https, correct? If not, then, yes.
Jun
25
comment Why do we still use the terms SSL and HTTPS?
HTTPS never meant HTTP-SSL, that is an assumption that doesn't follow the RFC. SFTP => Secure FTP not SSL-FTP.
Jun
5
comment How to disable a trail camera with a laser
This is one of those "consult your lawyer" legal matters. Pointing a surveillance camera through your neighbor's bedroom window has certain ramifications. On the bright side, the reviews for that particular camera say its kind of dodgy, poor night images and flaky triggering at 30 feet. Could always buy one and see how poor the infrared filter is, then you could do an invisible, non-invasive IR counterattack. NOTE: Infrared only works as well as the camera's UV/IR filtration works. Good filtration/iris system, no point. Pointing a laser? Pfft. It will get three good identifying shots of you.
Jun
3
comment What are these strange emoji's/characters and why do I keep seeing them?
UTF-8 characters your web browser cannot display because you don't have a font installed that has that particular codepoint. Bet it would show if you had access to a Linux distrubution. Looks to be 03eb => ϫ or 3eb0-3ebf which you can view in Character Map if you use the MingLiU font.
Jun
3
comment Why is a password accompanied by a username deemed 'safer'?
This would be a beautiful system to do a dictionary attack against, all you have to solve is the password and you own every account that matches, more safe because there could only be one password1 and therefore only one account would be compromised on that match.