Reputation
68,430
Next tag badge:
180/100 score
19/20 answers
Badges
10 147 367
Newest
 Enlightened
Impact
~4.2m people reached

1d
revised I got an email threatening to DDOS me if I don't pay a ransom. What should I do?
added 26 characters in body
2d
comment How could Craig Wright obtain Satoshi Nakamoto's private key?
"many publications propose Craig Wright may have obtained the private key from the real Nakamoto" - [citation needed]. Who has proposed that? No one credible has suggested this, to my knowledge. This seems like a question based on a faulty premise. Please edit to link to reputable articles which are claiming that (and double-check that that's actually what they are claiming).
Apr
27
revised How do I safely inspect a potentially malicious website?
Clarify final question.
Apr
26
comment Detect Man In The Middle From An Application
It sounds like this question should be closed, because it cannot be reproduced: it was based on a faulty premise, and there's no longer any question remaining to be answered (i.e., it's now clear that there's no question to answer). If that's not correct, please edit the question to make clear what the question is, in light of the updated experiments you did.
Apr
24
comment Is WebGL a security concern?
@BanksySan, thanks! Should be fixed now.
Apr
24
revised Is WebGL a security concern?
Fix broken link.
Apr
21
awarded  Enlightened
Apr
21
awarded  Nice Answer
Apr
18
awarded  Nice Answer
Apr
18
revised Are cloud storage services a good strategy to protect against ransomware attacks?
Remove gratuitous bold. Remove question that is off-topic for Security and re-focus on ransomware. Remove request for recommendations; that is off-topic, per our FAQ.
Apr
18
comment What should you do if you catch ransomware mid-operation?
You should ask only one question per question. Please edit your question accordingly. Your first question is an answerable, technical question. I suggest you edit your question to ask only the first one, and remove the second -- you can always post the second one separately.
Apr
15
awarded  Nice Answer
Apr
15
comment How does ransomware get on people's computers?
@immibis, no, that was not directed at you -- that was directed at every comment on the thread except yours. I agree with your comment. You might consider suggesting an edit to the answer that would include that information, if you think adding it to the answer would be helpful.
Apr
14
comment How does storing hash passwords work?
Please take a look at security.stackexchange.com/q/8596/971, security.stackexchange.com/q/23006/971, security.stackexchange.com/q/3323/971, security.stackexchange.com/q/211/971, security.stackexchange.com/q/51959/971. Your question seems to be answered by the material there. In the future, I encourage you to do more research before asking. There's lots of great material on this site -- try to browse through it before asking, and you might discover that the answer has already been explained!
Apr
14
revised How does ransomware get on people's computers?
Add citations for claims. Clean up formatting.
Apr
14
awarded  Nice Answer
Apr
14
comment Opt into strict DNSSEC checking - does DNSSEC provide a way for a zone to request strict signature validation?
Thank you for your detailed writeup, but I'm afraid the AD bit does not answer my question, because a man-in-the-middle who is stripping the signature can also remove the AD bit. I am looking for a secure way for a zone to indicate that clients should discard unsigned responses about the zone; the AD bit doesn't serve that purpose. Your final section is about how a client can decide to require valid signatures on all queries, but as I already explained in the question, that's not what I'm asking and doesn't address the problem, because of the compatibility cost of doing that for all zones.
Apr
14
comment Opt into strict DNSSEC checking - does DNSSEC provide a way for a zone to request strict signature validation?
Can you elaborate on how this answers the question, and specifically, how a zone like google.com can request that everyone else who looks up DNS records for *.google.com should refuse to accept any unsigned response claiming to list records for *.google.com? I don't see how the material you quote addresses my question. That material seems to be saying that a client or resolver can choose to validate signatures, which is of course true, but I don't see how it resolves the concern in my question. Or have I misunderstood something?
Apr
13
asked Opt into strict DNSSEC checking - does DNSSEC provide a way for a zone to request strict signature validation?
Apr
12
comment Will completely wiping your hard drive remove all malware?
Appears to be a dup of security.stackexchange.com/q/7204/971. See also security.stackexchange.com/q/44750/971.