Jeff

161 reputation

bio	website
	location
	age
visits	member for	1 year, 4 months
	seen	May 13 at 14:27
stats	profile views	24

	161 reputation	bio	website		visits	member for	1 year, 4 months
6 badges		location			seen	May 13 at 14:27

summary answers questions tags badges favorites bounties reputation activity

54 Actions

suggestions reviews revisions comments badges posts accepts all

Jan 16	comment	How is hibernation supported, on machines with UEFI Secure Boot? Also, I dont know if this helps: uefi.org/events/UEFI-Plugfest-WindowsBootEnvironment.pdf
Jan 16	comment	How is hibernation supported, on machines with UEFI Secure Boot? Looks like there have been some performance issues: answers.microsoft.com/en-us/windows/forum/windows_7-system/…
Jan 16	awarded	Editor
Jan 16	comment	Is privacy a part of security? (Bruce Schneier) Good answer. I just wanted to add Privacy is a part of the "C" in CIA (Confidentiality, Integrity, Availability).
Jan 16	revised	Suscpicious registry entry added 4 characters in body
Jan 16	comment	Analyzing Network Anomalies for Malicious events Come from an operational standpoint for a moment. If I work for an IT company, a server rebooting randomly is a big deal. Sure we have redundant systems, but "it just happened" is not an acceptable answer to the IT manager. I (or an escalated group) would need to do a Root Cause Analysis of why this server went down. In my investigation, I may uncover malware, or I may just uncover a memory issue. You are correct, Reboots alone don't always give the full picture, but reboots + system performance may provide an answer.
Jan 16	answered	Suscpicious registry entry
Jan 16	comment	How get data from password protected rar file? +1 for xkcd reference. I'd like to add, create a botnet consisting of the entire planets computers...
Jan 16	answered	How does UEFI Secure Boot prevent “evil twin” spoofing attacks?
Jan 16	answered	Analyzing Network Anomalies for Malicious events
Jan 16	comment	Building my own Darkspace The definition I found says: Darknet - Noun - "A computer network with restricted access that is used chiefly for illegal peer-to-peer file sharing." So, @lynks has the question, what do you want? A P2P network or a network on which to try pen-testing.
Mar 28	comment	Is it alright to tell everyone your encryption information? Bailey is right. It is better to communicate than to be right. Also, +1 on the answer. The best cryptographic functions don't depend on the algorithm being secret; rather the output reversed to input being hard to generate. For further reading, consider looking up pidgeon hole principle.
Mar 27	comment	Is it possible to turn a computer into a bomb? @Graham boo... anyway... what is an explosion? a terrific hardware malfunction complete with smoke and possible fire? or an actual explosion? From my basic chemistry understanding, you need something that would act as a fuel and since computers are no longer gas powered... closest thing you could probably get is a POP from a CRT monitor (if you could tell the monitor to draw too much charge to the capacitor).
Mar 27	comment	Is it possible to turn a computer into a bomb? I was going to post an answer that says, "ya, if you strap c4 to it..." but this one is better. Also heard you can blow up CRT monitors... not sure if true, and also not sure if a real threat today as CRTs are mostly gone.
Mar 16	comment	Weird mac address on router I would run nmap to see if there is a strange IP that would correspond to the MAC. You could also blacklist it and see what breaks. If a new strange MAC appears, they are probably spoofing.
Feb 17	comment	Securing a LAN without Physical Security Do you have pii stored on the system?
Feb 7	comment	How to learn penetration testing at home? True. I get the following before starting: Written expressed approval from the owner, an outlined (and signed) exact specification of what you are going to do, and notification (signed) that the organization has backed everything up. I agree with Rory, this could cause damage. My situation was a friend of mine had a network he setup and wanted me to just do scans on it. I got what I needed and gave him a report. I also want to add that I am working on a network that could be down for a month and it would not matter. No loss of revenue.
Feb 7	accepted	Legal Risk to unpatched servers
Feb 7	comment	Legal Risk to unpatched servers +1 Thank you. That was what I was looking for.
Feb 7	comment	Legal Risk to unpatched servers See my comment on Yoav's answer. Is the server owner responsible for content hosted on the server (even if they didn't put it there)?