« first day (1985 days earlier)      last day (3193 days later) » 

07:55
-1
Q: Would an encryption scheme that generates an extra key to be securely stored offsite be a safe backdoor?

NzallLet me be clear first and foremost: I do not think installing a backdoor in security algorithms is a good idea. They undermine the trust in the software and in the company that provides the service. That being said, I do agree that encryption provides a certain measure of protections for criminal...

 
2 hours later…
09:42
morning
10:13
morning
10:25
morning
 
3 hours later…
14:01
Should I trust selinux?
according to Wikipedia it was made by red hat and the NSA (The NSA is the guys who is said to spy on you.)
Security-Enhanced Linux (SELinux) is a Linux kernel security module that provides a mechanism for supporting access control security policies, including United States Department of Defense–style mandatory access controls (MAC). SELinux is a set of kernel modifications and user-space tools that have been added to various Linux distributions. Its architecture strives to separate enforcement of security decisions from the security policy itself and streamlines the volume of software charged with security policy enforcement. The key concepts underlying SELinux can be traced to several earlier projects...
Should you trust Linux ?
good one.
:D
Unless you rely on code review of the kernel, you will have to rely on someone say-so anyway
And in security, you are always secure "up to a certain point"
Okay
That was embarrassing!
was it?
14:11
What I just said
about selinux.
Why would that be "embarrassing"?
It is always better to ask the "stupid" question than to not.
everyone's knowledge is different
14:38
THINK DIFFERENT
15:07
Barry, Henry, M'vy, Rory - anyone else think that's weird...
we all end in y
In fact if we exclude M'vy, we all end in "ry"
Where's @Terry when you need him
I feel... excluded
(not that I care much, but...)
I did not notice that we all end in y --exclude M,vy makes it ry.
@HenryWHHack yep - that's what I just said... just up there... literally a couple of lines ^^
15:25
geez, now I'm an exclusion pattern? That's cool
15:45
once u do an nmap scan it saves the scan results somewhere so when you repeat it it'll only send some packets, anyone know where this file is on ubuntu?
So close... Soon 30 000!
2
 
3 hours later…
19:12
I have no idea how far your "don't ask for software support" polycy extends.
Is asking if a procedure would be useful better done here or by question?
How do you decline flags?
Let me farm some more rep, then I'll tell you XD
19:29
You're helpful
I wish I could
@RoraΖ As a regular user, many things that are flagged will end up in the review queues, particularly the "Low Quality Posts" flag. You can't decline flags (mods do) but if you choose "Looks OK" option for items in that queue, that will cause the flag to be disputed.
19:41
@Xander One of my flags was "Declined"
And the user only has like 5k rep. So I was curious.
Never had it happen before.
Interestingly enough it was declined by the OP of the answer.
20:07
@RoraΖ Interesting. I'm not sure under what circumstances that would happen.
The only thing I can think of that OPs can unilaterally reject are edit suggestions.
Hi. Does anyone know if there is a tool online to recover files encrypted by Teslacrypt? The friend who has the problem does not have a back-up.
20:49
Henry WH Hack: Hi!
Close bait:
-1
Q: Cost estimation tools InfoSec

RaduAny suggestions for resources for software licensing costs and resources allocation for info-sec tools. I recall coming across such resources in the past but I did not bookmark at the time

@O'Niel If I recall, the master key has recently become public, and Google will turn up a number of tools from reputable sources. Not sure if that's one of the ones Kaspersky had made or not.
21:18
Yeah, but that public key, does that count for all versions of Teslacrypt (1.0, 2.0, 3.0, Alphacrypt, and CryptoWall)? Thanks a lot by the way for your response.
21:31
All versions of TeslaCrypt, maybe/probably. Any derivatives, quite possibly not. Best way to find out:

1. Check published documentation/user reports for the decryption tool/key to see what is claimed to work.
2. Backup your data (yeah, the encrypted files - so, if something royally screws up, at least you won't be worse off than you are now).
3. Test out something that's supposed to work.
4. Contact the developer of the decryption tool if it doesn't.

« first day (1985 days earlier)      last day (3193 days later) »