I have a two-part question about question #570288 over on ServerFault.
Question:
Is it bad to redirect http to https?
Accepted answer (185 up-votes):
[...] Hell no. It's very good.
Part 1
Is that answer, well... wrong? :)
Am I correct that, from a security point of view, redirectin...
I've just got insulted by the British. Ah! The audacity!
I was trying to do something about this. I called them, and after drilling my ears with bullshit buzzwords about their product, the dude asked me "are you calling from a school?" and then I said "No". Then he hung up on me.
I think he thought I'm a student trying to get some pr0n on school's computers.
@Adnan if people look at mentions of a co. but that's relatively rare. The people you @ tag see it though and as they tend to be marketing/PR they can be focused on fixing bad impressions...
I've had luck with ISPs in the past taking that route..
The block has been fixed - you won't (as a non-customer) be able to use the support portal, but someone did contact us through the website contact form, and that's how we were able to spot and fix the issue.
@Adnan, if you could private message me if you can remember who you talked to, I will se...
PSA: When you're with your loved ones and you want to enjoy a nice glass of wine, you look a round and you can't find the corkscrew. Do NOT attempt to open the bottle with a knife. Your hand will slip, and you'll run to the ER with an almost-severed pinky and a damaged ring finger.
@terry - I did an alcohol free January once, and I have viewed never to do that again. It nearly ruined my life and left my wife and I with permanent injuries.
As we got hit by a drunk driver while stationary at traffic lights. If we had been drinking we would have been somewhere else, so wouldn't have found a car coming in the drivers door at 50mph
@AviD @RoryMcCune I have an auditor friend who, as part of an audit, wants to be able to process a webapp and see what kinds of external sources it's linking to. I'm having trouble coming up with which tools to tell him to look at. I'd rather not say grep the source files, or run Pharos and see what happens
@ScottPack Use the --skip to include a RegEx describing the website's own domain, and thus you'll find everything external.
@ScottPack By default, it doesn't include .JS stuff, but I'm almost certain I have a modified version that does. If not, I can assure you it's easy to modify.
@ScottPack so my standard would be run a proxy (e.g. burp) browse the site, compile list of URLs visited by the site. You could automate with a crawler as mentioned but downsides relating to crawler accuracy/visibility
@ScottPack so best accuracy would be a manual review, less accurate but faster would be an automated spider (e.g. burp spider, or most web app. scanners (e.g. arachni)
@TerryChia yeah and then people try and say Android is as secure... snerk
@TerryChia well is more fun as I make process learning c# and silverlight and a framework from scratch was a bit yucky. Also I could never let anyone see the code I've got so far it's a frankensinian monster!
I use two accounts on a PTC website (pay for watching Ads) . if i watch the Ads of one account it do not show the Ads already viewed even i clear the cookies. i used the annonymox in the fire fox browser to change my ip address it sometimes not looking working.
new customer needs help (ok), customer runs a booking/reservation service (ok), expect hacking and evidence of stolen credit cards (ok), recent suspicious traffic from Russia (ok).... customer runs on Windows servers (dammit!)
Indeed :) it's not so bad in the city it's now raining a bit so I'll compress it but still, I'm not moving in this. Teas, book, staying warm...
@ScottPack It's going up and down here all the time, I guess the warmer air brings in rain then it turns to snow during nights. I'd go to bed thinking hey this doesn't looks so bad then wake up to loads of new snow
The Alcoholic Beverages proposal on Area 51 has been closed for lack of interest/activity/forward momentum. Alternatively, if anyone is interested, Beer is now in public beta.
So I've just purchased a VPS to mess around with and host some of my sites.
I've changed the password to a 15 digit alphanumeric string via SSH, but I would like to know what basic security measures I should take to begin with.
For example, should I continue to use root to login - I've a faint ...
I have a two-part question about question #570288 over on ServerFault.
Question:
Is it bad to redirect http to https?
Accepted answer (185 up-votes):
[...] Hell no. It's very good.
Part 1
Is that answer, well... wrong? :)
Am I correct that, from a security point of view, redirectin...
I use two accounts on a PTC website (pay for watching Ads) . if i watch the Ads of one account it do not show the Ads already viewed even i clear the cookies. i used the annonymox in the fire fox browser to change my ip address it sometimes not looking working.
So I've just purchased a VPS to mess around with and host some of my sites.
I've changed the password to a 15 digit alphanumeric string via SSH, but I would like to know what basic security measures I should take to begin with.
For example, should I continue to use root to login - I've a faint ...
how can i use uniscan for tor site(.onion)?
