Skip to main content
Share Your Experience: Take the 2024 Developer Survey
259 votes
Accepted

Do I need to encrypt connections inside a corporate network?

Yes encrypt, it is easy. Plus according to a 2014 Software Engineering Institute study 1 in 4 hacks was from someone inside the company with an average damage 50% higher than an external threat actor. ...
Joe M's user avatar
  • 3,002
167 votes
Accepted

Internet courtship: Why would a hacker buy me poker chips?

I interpret your question as: What's the motivation for someone to use an alien Facebook account to play poker and stock it with chips? It's not that strange if you think about it this way: As ...
Tobi Nary's user avatar
  • 14.4k
110 votes

Do I need to encrypt connections inside a corporate network?

What are the real world chances that someone would steal his identity? Running a MITM attack on an HTTP connection when on the same LAN is basically trivial. ARP is not designed to be secure. Some ...
le3th4x0rbot's user avatar
  • 3,239
81 votes

Unexpected email from Yorkshire Bank

I feel that ignoring would be the wrong thing to do, but I'm not sure what to do. If you feel that ignoring this is wrong, look up the bank's phone number from a reputable source, e.g. yellow pages ...
vidarlo's user avatar
  • 16.6k
64 votes

Internet courtship: Why would a hacker buy me poker chips?

To me it seems as if someone is doing fraud from your account. They load your FB with money (from a stolen credit card). Lose at poker so the money goes to another FB account. Withdraw that with an ...
k1308517's user avatar
  • 1,292
56 votes
Accepted

Another domain is using our web app's IP address. How to prevent it?

Our web application is being mimicked by another domain ... The domain in question is configured to resolve to the same IP address as yours. That's why it looks like they mimic you when in fact it is ...
Steffen Ullrich's user avatar
47 votes

How to be mean to some people that stole my phone

Offensive defense is the type of attack you are looking to perform. You have been the victim of a technological crime, you are the target of a phishing campaign, and you want to get even. This is a ...
Connor Peoples's user avatar
41 votes

Do I need to encrypt connections inside a corporate network?

Yes, you have to encrypt your connections. Let's take a scenario where you believe your network is physically secured (with required physical security and other required security measure) and no ...
Sayan's user avatar
  • 2,031
33 votes

Internet courtship: Why would a hacker buy me poker chips?

OP has clarified that this is Zynga Poker, in which no real money changes hands. That being the case, the most likely reasons for a fraudster to put money into your mother's account is that this ...
Richard's user avatar
  • 939
29 votes

Do I need to encrypt connections inside a corporate network?

Risk of Repudiation In addition to all the fine answers about employees as a threat and visitors as a threat, I think you have to consider that the mere fact that the traffic is unencrypted is of ...
AllInOne's user avatar
  • 467
27 votes

How to be mean to some people that stole my phone

I've just checked on Whois.us. Both domains are registered to the same person, with a stated address in London. Try talking to the internet fraud team from your local police. Chances are they're ...
Graham's user avatar
  • 651
26 votes

Another domain is using our web app's IP address. How to prevent it?

Is your site nrnsewa.com? If so, you aren't being mimicked, they just entered the IP address of your server in the DNS entry for their domain name. As a result, https://www.djjpl.com.sg is hitting ...
Gordon Davisson's user avatar
24 votes

A fake Snapchat account has been created in my name

This kind of thing happens all too often, and there isn't much you can do about it. You aren't going to get ahold of the person's IP address, or be able to find out anything beyond what is on the ...
GdD's user avatar
  • 17.4k
21 votes
Accepted

Is the image of the signature considered PII?

PII by definition is any information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. And to ...
hax's user avatar
  • 3,941
14 votes
Accepted

Help! My information has been stolen! What do I do now?

How secure are my auto-saved passwords in my browser? Terribly insecure. These passwords are trivial to retrieve. How secure are my passwords that have been saved in a password manager? Not very ...
Steve Sether's user avatar
  • 21.6k
14 votes

Do I need to encrypt connections inside a corporate network?

Some companies, especially larger ones that have been around long enough to develop bad habits, have roughly the following fallacious security model: The network is safe as long as nobody else ...
multithr3at3d's user avatar
14 votes

Do I need to encrypt connections inside a corporate network?

In 2018, the answer depends on your threat and risk analysis results. Which, of course, you have performed, identified the likely scenarios, rated them and made a business decision based on the impact ...
Tom's user avatar
  • 10.4k
14 votes

How to be mean to some people that stole my phone

Call the police and sue them in court! That will show them you can be mean. Moreover, it will be legal and you will stay out of trouble.
A. Hersean's user avatar
  • 10.5k
14 votes

How to be mean to some people that stole my phone

The attackers are skilled enough to not enable the phone and to set up a fake Find My iPhone site. This clearly shows they understand fairly well how the iPhones security features work and are trying ...
Tom's user avatar
  • 10.4k
14 votes

I entered my password in a possible scam website. What should I do?

You should change the password at all the places where you have used it. Some Additional tips: Use a password manager. Use two factor authentication in every possible places. Never reuse passwords.
Rohith K D's user avatar
  • 1,019
13 votes

Unexpected email from Yorkshire Bank

The other answer addresses the rest of your question so I will focus on this part: My main concern is that my identity has been stolen for the purpose of procuring Yorkshire Bank products, such ...
Jon Bentley's user avatar
  • 2,061
12 votes

Unexpected email from Yorkshire Bank

I have a very generic e-mail address on which I receive similar e-mails from a Finnish and a French bank (I am not Finnish nor French and don't have any bank contacts in either country). However, I ...
d-b's user avatar
  • 489
9 votes
Accepted

Why would a stranger keep signing up to trading sites with my email address?

I have 4 different people who regularly use my email address to sign up for things. I get incorrectly addressed emails daily. After a few years of getting their emails, I know just about everything ...
schroeder's user avatar
  • 131k
9 votes

Do I need to encrypt connections inside a corporate network?

Yes, you do need to encrypt inside your "secure" corp network. Any network penetration will lead to snooping traffic, and anything not encrypted is easy pickings for the attacker. Credentials, ...
JesseM's user avatar
  • 1,952
8 votes

Internet courtship: Why would a hacker buy me poker chips?

It's also entirely possible that the entire thing is a confidence scam. In this type of scam, someone gives you some money to let people engage in high-risk behavior (e.g. gambling), and the victim ...
phyrfox's user avatar
  • 5,724
7 votes

Do I need to encrypt connections inside a corporate network?

Yes. You should always encrypt connections on any intranet, just as you would on the public internet. The DNS Rebinding attack publicized yesterday allows an attacker full access to any HTTP resource ...
Patrick Horn's user avatar
7 votes

Do I need to encrypt connections inside a corporate network?

Defense in depth There are several good answers here, but even if you trust all your employees completely (which you most likely should not), you open the door for an external attacker and make ...
Falco's user avatar
  • 1,502
6 votes

Is a full name and address all that's needed for identity theft?

How much is needed in order to perform "identity theft" largely depends on what you're qualifying as "identity theft". Regardless of this, it also depends upon what a given service provider requires ...
Iszi's user avatar
  • 27.1k
6 votes

How to verify personal information (identity)?

There are professional services that do background verification/auditing of individuals and gather the information to cross verify it. So it itself is a service offering apart from the application you ...
GhostSpeaks101's user avatar
6 votes

Is the image of the signature considered PII?

Yes, it is. Some people have well-readable signatures (sometimes even OCR-readable), so an image of the signature is equivalent to the full name of the person who made it. People who have unreadable ...
Philipp's user avatar
  • 49.4k

Only top scored, non community-wiki answers of a minimum length are eligible