meta user
network profile
| bio | website | en.wikipedia.org/wiki/… |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 2 years, 5 months |
| seen | yesterday | |
| stats | profile views | 83 |
|
May 16 |
awarded | Taxonomist |
|
Apr 5 |
accepted | Encrypting short identifiers? |
|
Apr 4 |
comment |
Encrypting short identifiers? @TildalWave, MySQL, but I was thinking it would not matter. And yes, I could keep a database of the public identifiers, but would prefer to have them cryptographically generated so I don't need to make a new field, and I wouldn't need to store all of those and do duplication checking of random data. |
|
Apr 4 |
comment |
Encrypting short identifiers? @Kitsune, I could indeed use a separate table or field. I was just noticing how there are block ciphers that do this collision free on a fixed key length (128 bits), and was wondering if I could find one that allows me to specify my own key length (32 bits, 24 bits), or use BigInteger (so I could say digit count instead of bit count). If there is no such cipher then I'll the separated table or field idea. |
|
Apr 4 |
asked | Encrypting short identifiers? |
|
Mar 20 |
comment |
How do I safely inspect a suspicious email attachment? @Adnan, I think it is worth pointing out that malware can detect whether it is in a VM, even if it can't break out of the VM, it may still be able to alter its behavior to mask its true purpose. A less likely feature, but still possible. |
|
Mar 18 |
comment |
How to support secure creation of a user account over an external API via a queued job? @cballou, Protections against superusers will be incomplete. Once the solution is implemented, the superuser could adjust the implementation to copy off the plain-text to a file. That doesn't mean you should give up on implementing this security feature, but what I suggest is that you prevent the use of superuser. You could ask a separate question like "How can I give users limited superuser permission for only permitted tasks?" |
|
Mar 6 |
answered | Is there a need to define “language safety”? |
|
Mar 5 |
comment |
How does Google get information about FTP servers - and how to avoid it? @messi, If you pop over to the Chat, or the Meta area (links at the top of this website), then you can get some advice from there on making good questions, and what to do about bad ones. |
|
Mar 5 |
comment |
How does Google get information about FTP servers - and how to avoid it? Does this belong on Webmaster's Stack Exchange? |
|
Feb 15 |
awarded | Nice Answer |
|
Feb 6 |
revised |
how to mitigate a DDoS from botnet on your website that comes from random IPs The OP has now stated that it "will have to be a software solution since it's in Amazon's cloud" |
|
Feb 6 |
comment |
how to mitigate a DDoS from botnet on your website that comes from random IPs Forgive me if my questions seem obvious. I personally ask theoretical questions all the time on this site. So, there is no point in asking for details if it is theoretical question, and there is no point in avoiding specifics if the problem is real. Further, please forgive my long list of questions. You have not stated the severity of your problem yet, and you have not posted sample access logs. While we might still make a good answer based on what you have stated, the best possible answer will come from having specifics. |
|
Feb 6 |
suggested | suggested edit on how to mitigate a DDoS from botnet on your website that comes from random IPs |
|
Feb 6 |
comment |
how to mitigate a DDoS from botnet on your website that comes from random IPs Do you have a performance or bandwidth usage problem yet? Is your system responding with 404 pages, or are the bots accessing real stuff? How random are the URLs, is it complete gibberish, or only partial gibberish? Do you have access to the user-agent header? Would you be interested in a solution that allows the bot to get through for the first few hits, and then completely blocks the IP for limited time (to reduce the problem, without completely stopping it.)? I ask all these questions because they could contribute significantly to giving you a better answer. Please answer what you know. |
|
Feb 6 |
comment |
how to mitigate a DDoS from botnet on your website that comes from random IPs If the URLs are random, they are probably resulting in HTTP 404, is this correct? You imply that you know how to block a consistent URL, do you? If so, do you mind letting us know what tool you would use? This would give us some context as to what tools you currently have at your disposal. |
|
Feb 5 |
reviewed | Excellent Future proof encryption possible in theory? |
|
Feb 5 |
awarded | Custodian |
|
Feb 5 |
reviewed | Satisfactory How secure is Windows 8 email authentication? |
|
Feb 5 |
reviewed | Excellent Is it possible to boot into root's /bin/bash on a LUKS encrypted device? |
