13,834 reputation
852118
bio website security.stackexchange.com
location Florida
age 32
visits member for 4 years, 3 months
seen 13 hours ago

This is a canary message, to be removed in the case of my death. If you're reading this, I haven't died yet.

Then again, how would you know? I mean, how could I possibly delete this message after my own demise?

You know what? Just go ahead and assume I'm dead. Any posts appearing to be made by me are from an impostor who's stolen my identity post-mortem, and only further prove the fact that I am dead. After all, why would I even think to post a canary message if I was expecting to be alive to remove it anyway?

In any case, I'm still not the droid you're looking for.


Apr
23
comment What is the problem with my pen-testing lab?
I was going to say the problem is using "Host-Only", but the VirtualBox User Guide seems to indicate VMs should be able to talk to each other and the host in this mode. They will not be able to get out to the Internet though. In any case, I usually prefer NAT or Bridged for Internet-enabled VMs and Internal for isolated VMs. I haven't really played with Host-only much.
Apr
16
awarded  Nice Answer
Apr
13
answered How does Nessus send remote commands on Windows without RDP?
Apr
13
revised What are the pitfalls of repeating a password multiple times for increased length and entropy?
deleted 3 characters in body
Apr
1
comment What are the vulnerabilities of this homemade encryption algorithm?
Vulnerability #1 - you're rolling your own crypto.
Mar
31
answered How Fast Flux technique works exactly?
Mar
31
comment How Fast Flux technique works exactly?
Fast Flux sounds like a card game to me. But it's missing an x. ;-)
Mar
23
awarded  Popular Question
Mar
19
comment How can I be sure Lastpass really can't access my passwords?
@OlivierCailloux This is a public Q&A site which has zero affiliation with LastPass whatsoever. While I agree that it would be great to see a published audit, I think it speaks volumes that anyone at LastPass has bothered to comment here at all.
Mar
19
comment Is there any way to check the certificates in a client's root CA store?
@Xander Good point - putting an even sharper "spear" in "spear phishing".
Mar
19
revised Is there any way to check the certificates in a client's root CA store?
added 125 characters in body
Mar
19
answered Is there any way to check the certificates in a client's root CA store?
Mar
19
reviewed Close How can I detect mode interface of other machine is promiscuous
Mar
17
reviewed Close How does a reverse proxy change the security posture of a web server residing in the DMZ?
Mar
17
reviewed Close How secure is Jitsi VoIP/IM Android app?
Mar
17
reviewed Close Secure software development checklist
Mar
13
comment How strong is visualCaptcha?
I'd argue this is actually weaker. A lot of Captcha circumvention services these days are actually using humans instead of computers. For a human, it's much faster to click on one thing than it is to type several characters or a couple of words. Therefore a human-driven Captcha circumvention service would be able to attack this form at a significantly higher rate than traditional Captcha.
Mar
12
comment Is sending passwords through cellphone text messages secure?
@supercat Also, the question here appears to not particularly be about a "one time code" case. It seems to be regarding password sharing between individuals.
Mar
12
comment Is sending passwords through cellphone text messages secure?
@supercat True, but ultimately that is still after-the-fact mitigation. You're dealing with a security compromise that could/should have been avoided by using more secure communications channels and/or implementing other, more robust security enhancements.
Mar
10
reviewed Close NMAP Scan Returns Odd OS Detection