Reputation
231
Top tag
Next privilege 250 Rep.
View close votes
Badges
1 6
Newest
 Yearling
Impact
~4k people reached

  • 0 posts edited
  • 1 helpful flag
  • 86 votes cast
2d
awarded  Yearling
2d
answered Do technical advice sites sometimes link to malware, and if so, how should we properly research errors?
2d
answered How trustworthy is Firefox?
Dec
7
comment Does an *additional* company-wide password offer any real security?
@Jason makes sense. For me, best practice is not encouraging things like the sharing of passwords and not getting in the way of people doing their jobs. So to me this approach provides an unnecessary extra step for people trying to access a resource for very little security gain and encourages the practice of sharing passwords. So not good really.
Dec
6
comment Does an *additional* company-wide password offer any real security?
it can be pretty useful for protecting company-wide webapps and stuff like that. - protecting against what? If the server is vulnerable then there's no guarantee this company wide password will ever be in play; no point having two locks on the front door if the window is wide open. This scheme as related by the OP sounds like thinking by a novice who hasn't thought of threat models or attack vectors and just thinks "if passwords are secure then more passwords must be more secure".
Oct
2
comment Is password reuse a problem if the password is very strong?
@emory absolutely. I shouldn't be at all surprised to hear this is already going on far more than we suspect.
Oct
2
awarded  Commentator
Oct
2
comment Is password reuse a problem if the password is very strong?
@volker you're right but I mentioned all 3 sites because password data from those sites was cracked. Hashing is a speed bump (often because it's badly done) not a wall.
Oct
1
revised Is password reuse a problem if the password is very strong?
added 13 characters in body
Oct
1
answered Is password reuse a problem if the password is very strong?
Jan
4
comment Is forcing users to use a strong password effective?
If this was an "optional" service (e.g. not one imposed on me by my bank, for example) then I would regard any attempt to force me to use a password selected by the provider to probably be an indication of cluelessness on their part, and it would almost certainly motivate me to buy whatever service I was considering your site for from another provider.
Dec
14
comment Can a neighbour who installed my router access it?
I can only agree with this: If you (@kenny) don't trust the person who sets up your router then factory reset and set it up yourself. Of course, you still have to deal with the limitations of your own knowledge, but at least it won't be malicious.
Sep
6
comment How do I deal with a compromised server?
disconnecting that PC may not be in your best interests until you understand the extent, I'd agree with this actually, though my reply was written for people who, if they have to ask for the sort of help my answer offered, probably aren't equipped to make this decision themselves, because as you know, the choice you're suggesting has to balance what the victim knows about the current situation vs. an unknown future.
Mar
28
awarded  Teacher
Mar
28
awarded  Editor
Mar
28
revised Would it be possible to overload a large part of the internet, and if so then how?
edited body
Mar
28
comment Would it be possible to overload a large part of the internet, and if so then how?
I've learnt to never say never, but I've certainly not heard of it. Internet traffic is routed after all, and a route implies the traffic is directed. There have been worms that scan portions of the internet looking for vulnerable hosts to attack, and in some ways these are undirected (and the traffic generated disruptive), but I would suggest that this is still 'directed'; the author knows what platforms they're targetting even if they don't know where all the specific machines using that platform are.
Mar
28
comment Would it be possible to overload a large part of the internet, and if so then how?
@DennisKaarsemaker I'm not so sure. While I don't doubt they performed a useful service here, I've not seen any properly independant verification of that claim.
Mar
28
answered Would it be possible to overload a large part of the internet, and if so then how?
Feb
3
awarded  Citizen Patrol