Reputation
15,724
Top tag
Next privilege 20,000 Rep.
Access 'trusted user' tools
Badges
11 61 127
Impact
~724k people reached

Aug
27
comment Bypass Network using Facebook
Your workplace only allows you to brows Facebook? Seems highly unlikely.
Aug
26
comment Is CASP recognized by the IISP?
Your best bet is to probably just start with a non-specialized tech support or sysadmin job, leveraging whatever experience you can already demonstrate. Once you've put some time in there, then you can show employers you know what you're doing on a computer and your Sec+ (or similar) will demonstrate enough interest/proficiency in security-related topics to make you desirable as an entry-level security professional.
Aug
25
comment What is the point of making a complicated PUBLIC password?
Then the developers who built the system are really the only people who can answer for this.
Aug
21
comment Would allowing shorter passwords sometimes be more secure?
@Kevin KeePass has that covered as well.
Aug
21
comment Would allowing shorter passwords sometimes be more secure?
@Kevin If you're using a password manager, presumably it's because you've lost the ability to memorize some or all of your passwords. At that point, you may as well just switch to fully non-memorable and random-generated passwords for best security.
Aug
19
comment How to check if your phone got hacked
@MikeOunsworth Strictly, any product recommendation question is off-topic for most SE sites because "they become obsolete quickly" (and some other reasons not really spelled out in the close-vote dialog). The SoftwareRecs site is a very recent development.
Aug
19
comment BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?
My point still remains that it's really not a backdoor - at the very least, it's not at all an effective one. Without phoning home or running a listener, someone would need physical access to your device (or to trick you into running a Trojan) in order to modify its firmware. Having a non-automatic update capability built into a device is a very far cry from including a remote access tool. It's not even remotely close to being similar to the D-Link backdoor. If anything, it's actually a front door - something intended for end-user use to begin with.
Aug
19
comment BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?
How is this a "backdoor"? Unless the device is phoning home regularly, or starting up a listening service, the manufacturer (or anyone else for that matter) doesn't have access to it except by user-initiated actions (like downloading and running a firmware updater program, or another program designed to act like one).
Aug
14
comment Does CryptoWall needs a internet connection to encrypt my files?
It's probably too late, but if you want a chance at saving any of your files you need to shut the infected computer down immediately. Then, slave your HDD to another computer and use that to pull off whatever's not encrypted yet.
Aug
11
comment Preventing Ethernet over power
@MasonWheeler It's not a smear at all. He was an authorized system administrator who pilfered and disclosed massive amounts of data beyond his authority - the very definition of an "insider threat", regardless of the outcome of his actions or the nature of his intentions. It's a simple matter of fact, which is pertinent to the discussion at hand. What character assessments may be made based on his actions are irrelevant to the truth of that fact, and also are not of interest to this discussion.
Aug
11
comment Preventing Ethernet over power
@RoryAlsop There are some devices/software dedicated for monitoring & identifying rogue WiFi devices. Are there similar for Powerline? Tracing physical location may not be quite so simple as with WiFi (or it more or less may - I don't know) but could you at least leave something plugged which could alert to the presence of a rogue signal? Perhaps even capture device identifiers like MAC addresses & network IDs?
Aug
11
comment Preventing Ethernet over power
Two words for anyone who downplays the insider threat: "Edward Snowden".
Aug
11
comment Preventing Ethernet over power
@paj28 You should care though, if some rogue devices are plugged in to hijack legitimate devices and then use Powerline networking to extend their network for easier remote access. An example use could be a WiFi Pineapple or similar device dropped deep within a well-shielded building - where the device wouldn't be able to send WiFi or cellular data back to its owner on or near the outside. Alternately, a USB NIC or other secondary adapter could be hooked to a "legitimate" system, and then to Powerline, to allow easier access from another room or externally.
Jul
30
comment Can data be tampered with after expert clones a drive?
At this point, the person under investigation has zero assurance (and no means to assure) that the data has not been manipulated since they were not provided the hashes. However, a court of justice will more than likely accept the testimony of a sworn civil servant who says the hashes provided for evidence were the same that were calculated at the time the drives were initially collected. What legal recourse there is, to address the fact that nobody (without an eidetic memory, and without bias favoring investigators) can corroborate this, will probably depend on your jurisdiction.
Jul
22
comment How secure is socks5 proxy over ssh?
Unless your boss is at the C-level (or equivalent in your company) over IT Security, how does having their permission make a difference?
Jul
21
comment Mobile Phone security - help finding security/privacy review/discussion
@user3578951 Actually, it's more of an SE thing than a "you're a phone/security newbie" thing. You should check out the Help Center and peruse the site a bit before asking your next question, to get a better idea of the Q&A format and quality expectations.
Jul
21
comment Mobile Phone security - help finding security/privacy review/discussion
@user3578951 You're definitely welcome to peruse the existing questions here, and to ask about any specific aspects of phone security that you don't understand. But we don't do open-ended lists (e.g.: references to sites/articles) that will likely change in value and validity over time, nor could we possibly cover the entire topic for you without posting a full book.
Jul
21
comment Mobile Phone security - help finding security/privacy review/discussion
My gut reaction (and what I ended up clicking) was "opinion-based" too. But really the most appropriate close reason for this is "shopping recommendation". In the past, we also might have flagged it as "too localized". Other elements of your question push it towards "too broad" as well. Overall, it's just really not a good fit for the StackExchange format.
Jul
21
comment Is (safe) encryption over compromised line impossible?
@Mark See above.
Jul
21
comment Is (safe) encryption over compromised line impossible?
@danielAzuelos I doubt the entire industry is going to change the name of a long-standing cryptographic standard, solely for the sake of historical accuracy. And making special notation about that history in an answer here, where such history is irrelevant to the question at hand, is really pretty pointless. A more appropriate place to raise such concern would be on the linked Wikipedia article. However, it seems there's no point in that either since the second paragraph already addresses it.