Joe M
  • Member for 3 years, 7 months
  • Last seen more than a month ago
  • Colorado, USA
Do I need to encrypt connections inside a corporate network?
Accepted answer
260 votes

Yes encrypt, it is easy. Plus according to a 2014 Software Engineering Institute study 1 in 4 hacks was from someone inside the company with an average damage 50% higher than an external threat actor. ...

View answer
How insecure is FTP?
12 votes

Credentials are transfered in clear text, but you know that from the other posts. But how easy is it to get those details? As an example I ran tcpdump and connected to an FTP server. Lets take a ...

View answer
I feel like it's impossible to learn reverse engineering
11 votes

Reverse engineering is fun. I use IDA once every other week, so I am not an expert in the field but do it often enough. If you want to understand reverse engineering you need to know how to engineer ...

View answer
What is the purpose of (ab)using the redirect page of my website for dubious URLs?
9 votes

The crux is that using your redirect leverages the good name of your business to get someone to click on the malicious link.

View answer
XSS vulnerability through burp suite
Accepted answer
4 votes

If you can't verify the result of an automated tool, it is not a good idea to report it's findings. Automated tools are great, but they have a problem with false positives.

View answer
I would like to get scammed
4 votes

Open your spam folder and just look :) But seriously you could register a new throw-away email address and then: - Google for popular scam things like viagra, etc and sign up for newsletters. - ...

View answer
PGP public key is visible
4 votes

No, that is the point of a public key. If they were private keys it would be a problem. Check this page out for more info: https://medium.freecodecamp.org/how-does-pretty-good-privacy-work-...

View answer
How to find what files in a zip are malware using Virustotal
Accepted answer
3 votes

An easy way would be for you to unzip the files in a VM, create md5 hashes and submit the hashes to virus total. You'd know which files are malicious then.

View answer
IT will only give password over phone - but is that really more secure than email?
3 votes

Is there more to the policy? In many organizations they will give a new password over the phone but they must know the persons voice and answer a question (who is your boss, when was your last review)....

View answer
Breaking .kdb (KeePass 1.x) file
Accepted answer
3 votes

There is no short cut. Brute forcing it is the way to go.

View answer
My system is being attacked or it is attacking
3 votes

Reading the alert you have windows file sharing turned on(CIFS) and another machine 114.50 tried to connect and use an exploit related to CVE-2017-0144 . It would appear from the alert 114.50 is ...

View answer
How dangerous is SMBv1?
Accepted answer
3 votes

There are a number of CVEs against SMBv1 including: Arbitrary Code Execution CVE-2017-0148 Denial of Service CVE-2017-0280 So it comes down to what is an acceptable risk for you, and do you try to ...

View answer
Is it a good idea to test a live company website as part of an interview process?
3 votes

A lot of companies are giving challenges as part of the interview process these days, mostly on sample apps, I've never heard of testing on a live site as part of an interview. Do you have a paper ...

View answer
Is setting a firmware password on a Macbook enough to prevent cold boot attacks?
2 votes

My understanding is that the Macbook Pro Retina has had soldered on RAM since 2012 and all other Macbook's since 2016. So quickly removing the RAM is not a likely attack. This would involve ...

View answer
IP reputation lists of malicious/suspicious IPs (paid or free)
2 votes

Brightcloud makes a great product that gets update frequently: https://www.brightcloud.com/ There are a lot of open source lists, but I personally find that they tend to have a lot of stale data.

View answer
Should organisations allow their employees connect with a VPN software from their own laptops to their machine at work?
2 votes

Should they? The answer is complex. With a completely unmanaged machine? I don't think the risk is worth it, so no. With a machine that has to have a corporate approved security policy? Yes. But ...

View answer
IP Logs at LinkedIn
2 votes

My questions was more concerning the issue of how IP adresses are logged and if there can be any explanation of the second entry rather than the actual legal issue. I assume that LinkedIn is using ...

View answer
resource on physical security that calls out doorknobs as being more secure than door handles
2 votes

In the PCI-DSS specifications for physical security they make no distinction nor does the NIST 800-53 make a distinction between the two thus I would say you are fine with a lever or knob.

View answer
Why 29 A's in the new HP ilo bug?
Accepted answer
2 votes

The author of the code wrote it so the max values for the field were 28 most likely, 29 breaks it. As @gameOver said you can define a variable to be any length you want. Here is a really silly ...

View answer
How do i know if my ubuntu apache version is secure?
1 votes

One option is to look at launchpad under Bugs->CVE https://bugs.launchpad.net/ubuntu/+source/apache2/+bugs?field.has_cve=on These are the bugs we know that affect that version of Apache the way it ...

View answer
Protecting a web app from unwanted vulnerability scanners
1 votes

Short Answer: No. Long Answer: It is on the internet so anyone can do whatever they want to it. Put the sites behind a firewall and limit to internal clients, leave it outside but require auth, or ...

View answer
Does escaping/cutting of <> prevents you from XSS
1 votes

The problem is you can use other encoding like base64 which may get processed by you browser to create a successful XSS, use HttpContext.Current.Server.HtmlEncode() instead. Example: $ echo '<...

View answer
When should TouchID/Fingerprint log-in expire?
1 votes

Why not treat it the same way as a password? It is just another factor of authentication. NIST800-63B recommends re-authentication at 30 minutes for inactivity or 12 hours of active use. https://...

View answer
Wiping possibly infected USB drive
1 votes

If automount mount is disabled I don't see how they could infect you. You could even go a step further and boot a live image and run your DD from there.

View answer
Is it Unrestricted file upload vulnerability?
1 votes

It is entirely up to how you handle the untrusted data. If you render it in a way that it would be executed, then yes. There are layers you need to approach, is there a file type you don't want, ...

View answer
Simple File Transfer Protocol
1 votes

Have you tried a packet capture? That would allow you to determine if the data is what you expect of SFTP. Although why your web server is performing outbound connections to a server you don't know ...

View answer
Vulnerability scanners for web APIs
1 votes

Burpsuite has the capability. You first set up your client to proxy traffic through Burp, then you can start testing the API. Step by step here: https://support.portswigger.net/customer/portal/...

View answer
Verify whether the IP address is SQL Server
1 votes

You could always try to connect to it with the sql client. Us the SQL Server client tools or try the python client below. Using python do a pip install mssqli-cli mssql-cli -S <server IP> -U &...

View answer
Internal IP's Probing to Unknown External IP's
1 votes

I think the best way is to use NetFlow analysis for large scale monitoring. If you have a Cisco router they have NetFlow collection built in and you can combine it with the open source tool suite SiLK ...

View answer
What Certification(s) to look for in Hard Drive destruction?
Accepted answer
1 votes

You could look for a company that uses DoD 5220-22.M standards for data destruction : http://www.dss.mil/documents/odaa/nispom2006-5220.pdf I use a company that says they meet that standard.

View answer