103 reputation
4
bio website naught101.org
location Australia
age
visits member for 2 years, 4 months
seen Jul 4 at 4:20

Contact:

Skype: naught101

XMPP/Googletalk: naught101@jabber.org


Mar
6
comment Defamatory post - obtaining evidence tracing perpetrator right to his laptop
@nedR: The answer is almost entirely un-related. It might be relevant if the defamatory post was made on a website controlled by the OP; and if the OP already knew the identity of the perpetrator, and has access to their cookie store; and if the OP had set up appropriate tracking cookies before the post was made (or, in the sting scenario, if OP was sure that it would happen again). But none of those things are stated in the original post, so this answer is entirely useless.
Sep
11
comment How are open-sourced operating systems and software kept secure?
Excellent examples too. That Linux example is heartening: someone was watching closely. I think that couldn't happen today, due to the distributed nature of git, but it makes you wonder. How hard would it be for some well-resourced government or corporate agency to hack the laptop of one of the linux core devs, and replace the git binaries with something that makes such a minor modification to a large commit, and hides it? Not sure how good the Linux kernel review processes are, but something that small can easily slip through one or two reviewers' hands...
Sep
11
comment How are open-sourced operating systems and software kept secure?
Awesome answer. TL;DR version: "Who watches the watchers?" This is not a new problem
Sep
11
comment How do I know a piece of software only does what the author claims?
Now I just need to invent a latent neuro-toxin that will cause the imbiber to re-write their will too me just before they die. (Sorry, I'm on a bit of a backdoor trip, and this analogy was missing one ;))
Sep
11
awarded  Commentator
Sep
11
comment I found what, I believe, is a backdoor in my home router, what should I do?
Polynomial's suggestion is the ethical one. If there's a backdoor in one router, then there's almost certainly a back door in every router of that model, and possibly many other related models. That being so, the company should be notified so that it can fix it, and notify users of the update. If they refuse, users should be notified directly (public posting), so they can make their own decision. All the other solutions are kind of pointlessly individualistic, and help no-one in the long run (who's to say the next router you buy won't have a similar problem?).
Apr
10
comment How can I protect my internet-connected devices from discovery by Shodan?
Aren't most home routers configured to be only accessible via ssh/telnet/http/whatever from the local subnet anyway? I know a couple of mine haven't even allowed access from wireless users on the local subnet.
Dec
14
comment How do certification authorities store their private root keys?
I'd be guessing that it's because your bet, and what appears to be guess work, is contradicted in other answers and comments...
Dec
14
awarded  Excavator
Dec
14
awarded  Editor
Dec
14
revised Whats the best way to make my internet traffic anonymous?
bulletise and remove useless comment
Dec
14
suggested suggested edit on Whats the best way to make my internet traffic anonymous?
Dec
14
comment Whats the best way to make my internet traffic anonymous?
@Shnatsel: you can create updatable LiveUSB installations though.
Dec
14
comment How to browse the Internet safely?
Even if you don't do something something stupid, there are weaknesses in Tor.
Dec
14
comment How to browse the Internet safely?
@L.DeLeo: I think that's only for a few major site (like google). But there' a plugin for firefox called HTTPS Everywhere that extends that to many other sites.
Dec
14
comment How to browse the Internet safely?
@DanBeale: you could get one of these: wired.com/gadgetlab/2008/02/cctv-busting-in
Nov
21
comment How do you explain the necessity of “nuke it from orbit” to management and users?
Why would you replace the machine? Why wouldn't you just wipe the hard drive and reinstall the OS?
Jun
14
comment Open Source vs Closed Source Systems
True, but giving "access to the source code" is potentially extremely valuable. Having outsider eyes look over your code brings new perspectives that might be missing in the dev team. You could even do something like stripe.com/blog/capture-the-flag, with a real project, with prizes for the best bug found (obviously not releasing details until a fix is out!)
May
18
comment I found that the company I work for is putting a backdoor into mobile phones
There's a whole US government website dedicated to whistleblowers, including those who are reporting on breaches of "violations of ... consumer product .. and securities laws." There's likely to be something similar, in most rich countries..
May
18
awarded  Supporter