Skip to main content
196 votes
Accepted

Is public Wi-Fi a threat nowadays?

Public WiFi is still insecure, and it will always be if not used together with something like a VPN. Many websites use HTTPS, but not nearly all. In fact, more than 30 percent don't. Only around 5 ...
Anders's user avatar
  • 65.6k
119 votes

Is public Wi-Fi a threat nowadays?

I'm a little surprised that nobody has pointed out that there's more to the internet than HTTP. Even if your claims about HTTP(S) and HSTS were correct (and other answers discuss that), you're ...
Dancrumb's user avatar
  • 2,636
106 votes

I got an email threatening to DDOS me if I don't pay a ransom. What should I do?

This article might be important for you: https://ca.news.yahoo.com/armada-collective-ddos-threats-were-212413418.html Someone has been copying the Armada Collective's email content to scare people ...
schroeder's user avatar
  • 131k
98 votes
Accepted

I got an email threatening to DDOS me if I don't pay a ransom. What should I do?

Based on the following article you may simply want to ignore it. This seems to be a common scam and your e-mail looks almost exactly like the one from the following article. http://arstechnica.com/...
Trey Blalock's user avatar
  • 14.2k
65 votes
Accepted

Should web applications that are only accessible from a LAN be held to the same security standards as publicly accessible websites?

Yes. Absolutely, yes. Your assumptions about your internal network have issues: you assume no attacker would ever gain control of any device in your network, which is a bad assumption to make (see ...
iwaseatenbyagrue's user avatar
53 votes

I got an email threatening to DDOS me if I don't pay a ransom. What should I do?

Ignore it. Cloudflare themselves have stated that these are fake - see https://blog.cloudflare.com/empty-ddos-threats-meet-the-armada-collective/ I highly recommend that you read this article, as it ...
David Glickman's user avatar
48 votes
Accepted

What's the Impact of the CloudFlare Reverse Proxy Bug? ("#CloudBleed")

Compared to the famous HeartBleed bug leak, this is similar in some ways: the uninitialized memory exposure means unrelated private data is disclosed. The things that are better This only affected ...
Jeff Ferland's user avatar
  • 38.3k
41 votes

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

What things can be done to prevent sudden rogue insiders from negatively impacting essential infrastructure using techniques they're privileged to do? In practice, very little. But to explain ...
gowenfawr's user avatar
  • 72.9k
33 votes
Accepted

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

Two-man rule - configure your systems so that all privileged access requires two people. This could be a physical control - privileged access can only come from the NOC, and inside the NOC people ...
paj28's user avatar
  • 33.5k
27 votes

What can a company do against insiders going rogue and negatively affecting essential infrastructure?

One approach is to accept that rogue actions cannot be prevented and focus on making sure the damage can be repaired. For example, make sure the routers have a separate control plane via which they ...
Daniel Darabos's user avatar
24 votes

Is public Wi-Fi a threat nowadays?

Another difficulty of public wifi access is that you are on the same local network as other unknown actors. Any misconfiguration of your local network permissions can lead to an intrusion into your ...
entrop-x's user avatar
  • 1,017
20 votes

Should web applications that are only accessible from a LAN be held to the same security standards as publicly accessible websites?

The attack surface on the internal network and external network is different which means that different security measures are appropriate. That does not mean that the attack surface in the internal ...
Steffen Ullrich's user avatar
18 votes

I got an email threatening to DDOS me if I don't pay a ransom. What should I do?

If you are in the UK please do this: Message sent by Action Fraud (Action Fraud, Administrator, National) Within the past 24 hours a number of businesses throughout the UK have received extortion ...
Damian's user avatar
  • 289
14 votes
Accepted

Could IOT Botnets be Stopped by Static IP addressing the Devices?

Almost all IoT devices of the sort we are talking here (ie, consumer level) are deployed behind home grade routers (or ARE home grade routers) and are using IPv4 and NAT/uPNP to reach the internet. ...
crovers's user avatar
  • 6,381
11 votes

Is public Wi-Fi a threat nowadays?

I would argue that any time you connect to a publicly accessible network you're putting yourself at risk, VPNs are great, but do nothing to firewall your machine against the threats on the local ...
Gartral's user avatar
  • 179
9 votes

Is public Wi-Fi a threat nowadays?

Some of the concern has to do with MiTM attacks and the tendency for laptops to be configured to blindly connect to open networks based on SSID after the initial connect. Nothing stops an unknown ...
bobstro's user avatar
  • 211
8 votes
Accepted

How can I prevent myself from barcode payload attacks?

After going through the code, I'm not sure that it is supposed to exploit or attack anything. It looks like its only purpose is to encode a payload using barcodes. It would be a nice way to import ...
schroeder's user avatar
  • 131k
7 votes

How can I prevent myself from barcode payload attacks?

This is remarkably similar to attacks like SQLi, and the remediation is the same. Wherever you allow a barcode to be scanned as input, validate it in the scanner and only allow input that matches ...
Rory Alsop's user avatar
  • 61.5k
7 votes

I got an email threatening to DDOS me if I don't pay a ransom. What should I do?

Pay and we will know its you. This is the thing: an empty threat looking exactly like what you have there has been going around, which always has the same bitcoin address in it. In other words: they ...
Pepijn Schmitz's user avatar
7 votes

Is public Wi-Fi a threat nowadays?

About using public Wifi services, Tor and VPN still can leak information. Besides Tor and VPN security implications, you still have to get at least DHCP services from the public Wifi. Depending on ...
Rui F Ribeiro's user avatar
7 votes
Accepted

What are the new MDS attacks, and how can they be mitigated?

My current understanding is that the microcode update changes the behavior of the obsolete VERW instruction so that it causes a flush of various internal processor buffers The new behavior of the ...
Hadi Brais's user avatar
6 votes
Accepted

Having malicious code stored in your DB

In my opinion it is a bad way to have escaped data in the database. Since the escaping rules vary depending on the input an output medium (HTML, JSON, ...) they belong at the place where you input and ...
Steffen Ullrich's user avatar
6 votes

Could IOT Botnets be Stopped by Static IP addressing the Devices?

wouldn't it make since to start giving IOT devices a static IP No, because IPs only work in the proper network context. An device's IP needs to be routable, which is to say, sitting on a network ...
gowenfawr's user avatar
  • 72.9k
6 votes

Is public Wi-Fi a threat nowadays?

This is exactly a scenario where semi-"opportunistic" encryption (like the mixed plaintext/encrypted HTTP/HTTPS ecosystem) can fail you - at the very least you have to rely on your browser not ...
rackandboneman's user avatar
5 votes

I got an email threatening to DDOS me if I don't pay a ransom. What should I do?

This threatening email seems to be just that: a threat. You don't have to tolerate it, whatever they will do, this is plain extortion. Report it to: your hosting company, by sending them an ...
dan's user avatar
  • 3,068
5 votes
Accepted

Is older software safer to use?

There are way too many factors to consider in your question. older software has had a chance to have its bugs discovered and fixed older software might have known bugs that have not been fixed or ...
schroeder's user avatar
  • 131k
5 votes

How should we implement responsible discovery program internally only for our organization employees?

The best way is recognition - after a security issue has been identified or fixed send them some email award template and CC in their manager. The value to them is being able to refer to this item in ...
McMatty's user avatar
  • 3,250
5 votes
Accepted

What is the difference between Anti - APT (Advanced Persistent Threat) and ATP (Advanced Threat Protection)?

Advanced Persistent Threats (APT) describes actual threats. Depending on who you talk to and the context these are sophisticated and targeted attacks by advanced actors with lots of money like states ...
Steffen Ullrich's user avatar
4 votes
Accepted

Is it possible to spoof a paired Bluetooth device?

It has been in the past with various devices. It entirely depends on the BT version and implementation on the device. Modern versions of BT (4.x) have good feature sets to prevent these things from ...
HackSlash's user avatar
  • 277

Only top scored, non community-wiki answers of a minimum length are eligible