The DMZ

« first day (2178 days earlier) ← previous day next day → last day (3000 days later) »

Stack Exchange

05:11

Technically DC isn't a state, but no one is too pedantic about it because they don't want to disturb the snakes.

4 hours later…

Wally

09:15

Q: How to track back avarage store bought android spyware?

My phone is vibrating some times when I move it and also when I unlock it using the unlock button as though some one is watching the camera and remotely doing something that is leading to vibration. I understand there may be vibration when I unlock, but it is also happening when I move the phone...

Rory Alsop

09:57

@Wally - that question doesn't work here, I'm afraid. I have closed with a brief comment. Happy to discuss here.

Wally

Can you please suggest a question related to my questions but not off-topic?

@RoryAlsop

Something that would be useful to me.

Rory Alsop

Your challenge is that at the moment you have described a couple of symptoms which generally have nothing to do with spyware or being compromised

And identifying attackers is almost always impossible

Wally

What if the spyware is conference calling the person when I receive a call

Rory Alsop

So in almost every circumstance, unless you actually have a police team who is happy to forensically examine your phone (unlikely without strong evidence) then you just factory reset the device

@Wally why on earth would you think that? Are you a very important target?

That sort of thing is so incredibly rare it's effectively nonexistent

Unless you are the president, or work in an embassy, or something of that ilk

It's just not worth it for any attack group to do that to individuals who are not key targets

The useful piece is - wipe your phone (or buy a new one)

And change passwords etc on all your login accounts

Ooh - I like your current rep though. The reputation of the beast :-)

Wally

I kinda went nuts a long time ago and started shouting obsceneties against all religions and against my country when I was inside my house. I said the worst possible obscenities about gods and religion and terrorism and my country and against those near my house. I was yelling but didn't realize that they were able to hear me for a long time. The privacy law obstructs them so they're probably planning something.

Just my guess

By terrorism I mean the religious kind.

Rory Alsop

10:14

Any time someone says "they're probably planning something" they are almost certainly wrong. Yes, in some countries surveillance is endemic (e.g. The uk where I live is one of the worst in the world) but it doesn't typically work the way you think, as that technique is just too onerous. There are many easier ways to spy on people.

Wally

I guess I understand that there is a chance I may just be too paranoid.

Rory Alsop

that is almost always the case

aioobe

@RoryAlsop I see it plainly as a question about information security. May I try to reformulate the question on security.SE, and leave out all references to bitcoin?

Rory Alsop

@aioobe - Bitcoin controls are very specific

You could ask about the controls used in financial services, and you will get answers around segregation of duties, access controls, end of day reconciliation etc

that could be a good question

The reason bitcoin is still an outlier is that regulation has not fully been implemented to cover it, whereas traditional financial services have very strong, very specific regulations

aioobe

indeed, but I fully understand that nothing can be done on bitcoin protocol level. What I'm curious about here is whether there for instance is a mechanism that would prevent a single employee from accessing databases, or reconfiguring security setups etc

Rory Alsop

10:22

With regard to bitcoin, actually it is all done at that level. The protocol enforces the model. Bitcoin may not be the best (in fact banks are not including it in possible cryptocurrencies/blockchain solutions for various reasons)

The more general question I mentioned above - yes, there are many mechanisms - layered and assessed (very rigidly for companies that are subject to eg Sarbanes Oxley)

My employer, for example, probably expends a couple of thousand man days a year on reporting specifically on this one topic because of SOx

aioobe

ok. thanks. with your explanation I'll try to formulate a better question.

Wally

@RoryAlsop I thought Europe was the Kingdom of privacy

Rory Alsop

10:40

Hahahahahahaha. Germany, yes. UK, no.

Wally

I guess that's one of the reasons they got out of the European Union.

Anders

@Wally Must suck to live in a country where you cant to rant about politics or religion or what not without having to worry about who heard. You have my sympathy!

Wally

10:54

One religious leader died and there was a strike and one girl posted "Is this bandh necessary!" and another girl liked it. Both were arrested. @Anders

Strikes are forced in my country. They destroy shops that are open

indiatoday.intoday.in/story/…

And people were arrested for raising Pakistan flag

Rory Alsop

Okay - if that is the country you are in, then the likelihood of surveillance-ware on your phone is even lower. The numbers just don't stack up. To save your worries, just factory reset it.

4 hours later…

CodesInChaos

15:23

@RoryAlsop Would this question be acceptable on security.se? Seems a bit too product-recommendation focused.

Q: Secure keystore for ED25519

I'd like to use ed25519 on a larger scale and I want to store the keys in a secure way. I'd prefer a hardware solution but the only device I found was a smaller USB device (https://sc4.us/hsm) which needs user interaction. So this device is not an option. Are there any known alternatives? If ther...

ed25519

Rory Alsop

16:16

I agree. It's a product recommendation question. Don't think we'd want it

Xander

16:53

@RoryAlsop Flagged this as not an answer, but in hindsight should have just flagged it for mod attention. It needs burnination. security.stackexchange.com/a/144188/12

1 hour later…

Rory Alsop

18:15

@Xander thanks - got it

user334283

18:38

I'm penetration testing my wifi..when I send de-authentication packets to the victim, do those de-authentication packets take my source mac address as header information?

« first day (2178 days earlier) ← previous day next day → last day (3000 days later) »

all rooms