397 reputation
15
bio website
location
age
visits member for 2 years
seen Nov 23 '12 at 20:15

Mar
28
awarded  Yearling
Nov
23
comment How to catch a gmail hacker/money-scammer? (in conversation with one right now!)
Even if the IP is of the client and not the MTA, you can't guarente any reliable information from it without a court warrant. And due to issues mentioned earlier with international law this is unlikely. It is more costly to perform a joint operation than its worth on cases this small.
Aug
14
awarded  Caucus
Aug
9
answered Information Security is becoming more important, but why is it still so difficult to start off in?
Aug
9
comment Send credit card info by email from HTTPS and SMTP on SSL
I also want to point out that this type of transfer will be extremely insecure. Your client software may accesses the mail server with SSL, but the message itself will be passed between mail servers over generic port 25 SMTP.
Jun
13
comment I found that the company I work for is putting a backdoor into mobile phones
good point on the confidentiality part.
May
31
awarded  Critic
May
31
comment I found that the company I work for is putting a backdoor into mobile phones
In no circumstances should a discovered backdoor go unreported. Government backdoors still violate my right to privacy IMO. Also, if the backdoor is intended for State use with the proper checks in place, making it publicly known shouldn't hinder its use. Always report these kinds of things...
May
25
answered How to run a Tor exit node securely on a vps
May
14
answered Wifi WPA cracking with reaver
May
14
answered How Team Viewer establish Remote Desktop Connection
May
14
answered Where can I find good dictionaries for dictionary attacks?
Apr
24
comment Is HTTPS necessary for password change if user has already logged in with HTTPS?
Just want to clarify something. Firesheep is not a MitM tool, it's simply a session hijack tool. Using site wide SSL protects against session hijacking, but dosen't protect against a MitM attack. SSLstrip and other tools work just fine. Remember, its all about layers.
Apr
24
comment Online password managers
It seems like people always brag about these products. Honestly the on-screen keyboard thing is a joke. Any half decent malware will still pick up the password on submission or with GetWindowText(). Also the ability to share a password without revealing it is cryptographically impossible. Most of the time this is a software restriction that can be exploited (has already been done to both RoboForm and LastPass). This isnt to say I am against password managers (I use 1Password), I am just against advertising them by bragging about there most useless features.
Apr
19
comment How do software keygens work?
Credible teams and sources do not release infected warez. The scams you are talking about is apples to oranges. The true underground, not the links on Youtube, are generally safe.
Apr
19
answered Browser hijacked - how to fix and prevent?
Apr
9
awarded  Supporter
Apr
9
comment Mac OS X from an IT Security Practitioners' Perspective?
I'm in the same boat as you. This post hit the nail right on the head. :)
Apr
3
answered Does “Start the following program on connection” mean what I think it means?
Apr
3
answered What is the threat of having the clipboard enabled on Citrix and other rdp?