Holy crap... This guy is so pwned, and he's still asking for more?!?!
flag
I can get a virus just by downloading a torrent or only when opened? – Totty 2 hours ago
@Totty - What else are you going to do with the torrent? Why are you downloading it, if not to open it? And, nobody here is going to direct you to a site that can infect your PC just by browsing it. It would be irresponsible in the first place, and damaging to this site's reputation for it to have links to known malware providers. If anyone did decide to provide you with a link, I'm certain the link would be hastily deleted by the moderators and that person may even be subject to punitive actions…
@RoryAlsop - Can you shut that thing down? I don't see it going anywhere productive from here. It's an okay-ish question with some decent answers, but the comment discussions need to be cut off now.
Come to think... who called it a troll to begin with? (And then, who helped feed it? D'oh!)
Haha... no surprise that he's not going to post the file names of his torrents.
I have hopes (perhaps in vain) that this one will click...
How the virus goes from a site to the PC? – Totty 2 hours ago
@Totty - Your PC has to download the site's files (HTML, JPG, SWF, etc.) to a local location (either on the local HDD, or in RAM) in order to view it. Then, the browser will process the code necessary to render the site for your viewing - which may include exploit code. – Iszi 30 mins ago
But in order to activate the virus, the browser must have vulnerabilities in opening files as is the only thing that will open those local files. – Totty 22 mins ago
@ScottPack I was kidding anyway, in case you couldn't tell. I haven't torrented in years and wouldn't dream of it now. By now I've probably lost (either accidentally or deliberately) anything I have torrented.
Well, I think things have settled down enough here that I can pull myself away long enough to go home. (Got caught up at the office in a last-minute high-priority issue, then in this.)
@Iszi heh - I'm about off to bed too. Finished redecorating my son's room as a surprise fow when he gets home on Monday from granny's, and have celebrated with much wine
We've joked about getting one of the blue emergency phone lights, labeling it "Porn Alert!!", and rigging it up to a packet capture box to fire on some random hex string.
@Iszi Ah, we keep ours in a safe in the forensics lab. Slightly less exciting.
But, the beeping from the keypad and the kachunk sound of the bars locking into place makes me feel like a man to be sure.
A security auditor for our servers has demanded the following within two weeks:
A list of current usernames and plain-text passwords for all user accounts on all servers
A list of all password changes for the past six months, again in plain-text
A list of "every file added to the server from re...
@Iszi Wow - unfriendly trust-demanding site they have. No content in the middle presumably unless I allow javascript/flash from them. And I can't copy/paste text, but they say they provide "detection guidance" against 0-days. Doesn't sound like AV to me.
@nealmcb I think it's more of an IDS service, but they've been known to chat about vulnerabilities that they're not disclosing to the vendors. You can probably find their Chrome exploit on YouTube still.
Right. I know of several organizations that sell vulnerability info and don't give it to vendors. Just wondering if that applies to any of the AV players
I have recently learned the basics of buffer overflows, and I have written a few very simple pieces of C/C++ code with unsafe buffers and have produced some interesting results.
Now my question is this: Can you name a program that's actually out there in the wild that has a known buffer overflow...
In the United States, there has been a lot of talk about creating a secure polling system that would operate over the internet. I have also heard that Securing a poll over the Internet is impossible. The system would need to be secure enough that politicians could make policy decisions based on v...
Last week, we looked at the hardening tag. Today we are going back on a specific question : Does an established SSL connection mean a line is really secure? Why did we pick up this question? Because almost everyone has heard of SSL, but many are not sure how it works and what it is [...]
Ok but in my case with 54 viruses apparently I have no problem and no stolen money from none of my accounts. Why I can't just live with them? – Totty 4 hours ago
I've been reading on various sites how PC get infected by viruses and I got:
Email attachments (but of course, only if I get an exe and open or execute something, right?)
Don't update windows
Downloads (the same as email attachments, right?)
Pros:
I can't think of any worthwhile.
Cons:
...
although since the coffee machines and espresso machines arent working at the coffee shops due to a blackout on those blocks due to blown power stuff...
I really enjoy computers - especially security. That's why I went to a school profiled as technical/IT. However, they teach crap. They don't know anything after the release of windows xp/2003. When one of our teachers told us about the dangers involved with a ping of death I gave up on trying to ...
@TheEvilPhoenix Remember, its all CC licensed - we own it. If we can swallow the idea of letting the OP get some credit, we can just edit the question to suit. Or, better, someone can just ask the question in a different way, and everyone can just move or reproduce their answers there... In fact anyone can reproduce an answer there, with credit....
We can work make the site what we want it to be....
@TheEvilPhoenix No, the thread started out as trollish. Set off my "troll alarm" from the very beginning. Yes, some of the concerns in it may be valid and may generate some useful and valuable discussion, but this particular thread was a troll from the outset.
@TheEvilPhoenix Despite having gotten a "Nice Answer" badge from it, I have to agree. It needs some serious cleanup, and perhaps a bit of overhaul, if it should remain.
I've been reading on various sites how PC get infected by viruses and I got:
Email attachments (but of course, only if I get an exe and open or execute something, right?)
Don't update windows
Downloads (the same as email attachments, right?)
Pros:
I can't think of any worthwhile.
Cons:
...
What I don't understand thus far is the
distribute it as a re usable code in an internal portal
Is this code for internal usage? I don't know what methods and standards you are going by here as far as application development. But I can say that cobbling something together without a proper...
First, I'm confused about the implementation details you're asking for. Second, I can't think of a circumstance in which different keys would be useful unless you're trying to authenticate your users by their certificates -- which you're apparently not doing (users needing different encryption, n...
@ThomasPornin I think he's trying to have his server use a different SSL cert depending on who connects to it under the idea that it enhances security.
@RoryAlsop Thanks for the tip on that internet polling question. And I'm delighted to see pulpspy's recent answer also - he's done research in the field.
In the United States, there has been a lot of talk about creating a secure polling system that would operate over the internet. I have also heard that Securing a poll over the Internet is impossible. The system would need to be secure enough that politicians could make policy decisions based on v...
@ThomasPornin The batman math is very cool even with the unstated assumptions. But I want a good post about it to point people to, e.g. with the equation itself in a reusable form so people can play with it. Haven't found anything yet.
... compartmentalization will matter far more for security. Apps will need external permissions in the style of apparmor to be effectively secured against malicious updates. My browser shouldn't ever access my documents folder without my operating system interfering.
That the functionality of software is regularly updated without user intervention just unnerves me. I know the upside, but I dislike the downside.
Also, I want to throw my phone out the window. I get annoyed after I get about 4 texts in 2 hours, and I'm up to 16 in the past 10 minutes
There are per-site chatroom easter eggs for many sites. This is meta's easter egg.
What are the others? Hmm...
I've been reading on various sites how PC get infected by viruses and I got:
Email attachments (but of course, only if I get an exe and open or execute something, right?)
Don't update windows
Downloads (the same as email attachments, right?)
Pros:
I can't think of any worthwhile.
Cons:
...
What I don't understand thus far is the
distribute it as a re usable code in an internal portal
Is this code for internal usage? I don't know what methods and standards you are going by here as far as application development. But I can say that cobbling something together without a proper...
Users who have shown they are responsible wielders of moderator flags should be able to access moderator tools at lower reputation levels.
