Dewi Morgan
  • Member for 7 years
  • Last seen more than a month ago
Is it possible to embed information that is both nearly invisible to the naked eye and decodable from an external camera?
40 votes

Consider that you might not want what you are asking for. That is, if the purpose of watermarking is to prove that you authored it, your cuttingroom clips and outtakes are evidence enough - you can ...

View answer
Can a virus destroy the BIOS of a modern computer?
20 votes

Practically speaking, a virus is software, so can do anything that any other software can do. So the simple way answer to this question, and all others of the class "Can viruses do X?" is to ask "...

View answer
Will typing my password twice make it more secure? Or typing each character twice?
15 votes

My password cracker already tries letter doubling, word doubling, word reversing and doubling, word-case-flipping and doubling... ...and many more. Yep. Doubling adds some to the difficulty: about ...

View answer
Why submit a website to plaintext offenders?
13 votes

The question seems to make the assumption that plaintext offenders is the only site which maintains such a list, rather than just being the one with the highest white-hat public profile. There are, ...

View answer
Are zip codes considered to be personal identifying information?
9 votes

Yes, of course it is personally identifying information. It provides identifying information about a person, so why on earth might it be considered otherwise? Consider a shopkeeper in a small town ...

View answer
How can mom monitor my internet history from a distance?
5 votes

Others have mentioned shared profiles, known passwords, and google history, and the ways to resolve those. But even more likely is: what do you get if you google your name, plus the word "youtube"? ...

View answer
Should I worry about remote timing attacks on string comparison?
5 votes

@Ben's answer to compare hashes rather than keys directly seems the best-practice approach for the task, and en passant also becomes a partial solution to the problem. However, it remains vulnerable ...

View answer
Is "password knocking" a good idea?
5 votes

PROS: This system does share some benefits with two-factor authentication. 1) Most browsers and password saving systems do not support it, so will remember only one of the passwords at most. So it at ...

View answer
Why does Sage Ransomeware blacklist League of Legends, steamapps, etc.?
4 votes

These two systems both perform file validation. If your program stops working, as a user, you will try to fix it by running the file repair. Later, you find that your system is encrypted with ...

View answer
Effects Of Encryption On Computer Systems
4 votes

Performance was once the biggie, but there's also the impact on low-level access and operations. A good aspect to explore might be DRM. DRM is bad (or good) because it makes it hard to access your ...

View answer
Is it possible to embed information that is both nearly invisible to the naked eye and decodable from an external camera?
2 votes

Another answer that's vulnerable to removal if people know it's there: ultrasound. Informative links: https://science.slashdot.org/story/17/01/05/2159219/ultrasound-tracking-could-be-used-to-...

View answer
How to prevent username and password matches when changing a username?
2 votes

This is not an answer, I'm only mentioning it so that people don't do this. You might decide that it would make sense to store, in addition to the regular hash of their case-sensitive password, a ...

View answer
Cryptography: Encrypting with password without storing it
1 votes

What you are proposing is the exact thing you wish to avoid. You are proposing to include a short encrypted passage or static plaintext at the beginning of the text. But... that's exactly what a ...

View answer
Is it possible make brute-force attacks ineffective by giving false positive answers to failed log-in attempts?
1 votes

For remote access, as others have said, simple lockouts and delays can work. For passwords, what you have is a one-way hash. To validate the password, you re-hash it, and compare the two hashes. ...

View answer
Is it acceptable practice to only increment a number when changing a password?
1 votes

If your password database is leaked, a good password can take some time to crack. By which time, quite likely, you have been forced to change your password. That concept is a large part of why these "...

View answer
Internet courtship: Why would a hacker buy me poker chips?
1 votes

So, someone bought a hacked FaceBook account, set up a custom fake PayPal account in the name of the hacked account, gave the hacked account poker chips, and posted ads about their game to FaceBook as ...

View answer
PHP malware/shell keeps resurrecting
1 votes

If you don't know how you got infected in the first place, then my guess would be the resurrection is coming from you getting hit by the same vulnerability scanner that hit you the first time round - ...

View answer
Is the option to jump to blanks in password fields a security risk?
0 votes

In any instance of a vulnerability, adversarial thinking helps. In what scenario would I find this vulnerability helpful, if I maliciously wanted access to someone's account? Well, as a sysadmin, I ...

View answer
Discouraging users from copying images off a website?
-1 votes

One option is to add animation to your images. You can't screenshot animation. That also makes it a problem for selling hardcopy versions in comic form, though: fans will say "eh, it's not as good as ...

View answer
Calculate time taken to break AES key
-3 votes

The important thing about information security is to think laterally before your foe does. So, use that CPU time to mine bitcoins, or whatever makes money using a CPU. Do whatever it is, enough that ...

View answer
Is single quote filtering nonsense?
-7 votes

I'll contradict most of the other current answers. Your pentesters are almost certainly 100% correct. My assumption: no pentester worth their salt would have reported this unless they had found that ...

View answer