For the record, I call it good because it reflects well on my abilities and my customers are getting what they pay for. I thrive on cocky IT admins that pledge their network is secure. Its how I landed this customer contract and why I have to hire an employee starting in July to keep up with over 50 scheduled pen tests already this month. I use a custom live cd I built and all of the tools are open source, except for a few custom python scripts/c programs I wrote. One of my friends sent me a code snipit to finish a script I can use to accomplish this. I'll post the script when its done. — John J6 hours ago
@D3C4FF Thanks for that link btw. That Matasano challenge thing looks interesting, I think I'll start to tackle them once I cleared out this set of projects.
@TerryChia those were my thoughts also but tried to avoid commenting on it ... I would like to know how he pronounces "Let me penetration-test your Wi-Fi" without bleeding much through his nose :))
@TerryChia It's a bit funny that he's asking how to do that what's basically extremely simple and then brag about how good he is tho... I have a feeling this is one of those van techies that drive around and run aircrack-ng and then subtly extortion pet shop owners to secure their network
Its fine, its my first time asking a question here. I thought the community was all security experts but I forget people from all levels, expert to novice, come to learn/share. It was my fault for making the assumption everyone had previous working experience in pen testing and knew security basics. We all have to start somewhere. — John J9 hours ago
Am I the only one who just want to bash this guy's head to the nearest wall?
@TerryChia It's a bit funny that he's asking how to do that what's basically extremely simple and then brag about how good he is tho... I have a feeling this is one of those van techies that drive around and run aircrack-ng and then subtly extortion pet shop owners to secure their network
@TerryChia Well, I'm not well experienced in it. I've used it several times with these YouTubers hangouts. It's nice that you can join so many people so easily. But still, for 1-on-1 I'd still use Skype. I just like that what I type/say/do is encrypted on my computer and sent directly to the other person's computer and decrypted there. (in some cases it's routed through a Skype node, but it still can't decrypt it)
@Adnan Ah, I guess they use the centralized servers for the whole management and establishing the whole routing thing while using p2p for the actual communication?
First, let me apologize if any of this question is naive or beneath the scope of this board. Bear in mind the context and that I'm asking as an attempt to exhaust all resources.
Also, I understand if not all of my parameters can be met, but having more facts and knowledge is just as helpful as a...
@RoryAlsop I like your note about using half of the lines on an ethernet cable. I must have crimped a thousand patch cables in my life and never thought of this.
Quick question, I think I'm right in saying that for RSA the message you're encrypting has to be the same size as the public key/modulus and produces a signature of the same length? Does ECC have this property as well? So if I have a 64 byte ECC key do I have to have a 64 byte message?
@LucasKauffman Well, to be honest, if @Poly didn't mention the dupe any immediately just answered it, I don't think we can blame the OP for not searching before asking.
In the past few months I've been active here, I saw that we have a small problem when it comes to that. We are encouraging this behavior. Starting with myself, of course. I have some answers on questions that were later marked as dupes.
@Polynomial I'm in no way trying to tell you what to do, but if I were you I'd just downvote it and comment. Later others will see your comment and upvote it.
you can stand in one spot and stare into space for an hour and it feels like 30 seconds, or stand in one spot for 30 seconds and think it's been an hour
Right now I'm setting up an API, to be consumed on the client-side to set up a directory site. I'm wondering what extra steps I need to take just to prevent people from gaining write access to the data.
Some notes:
The API / database has no private information. All information is available and...
@LucasKauffman right now I'm guessing I'm experiencing the precursor to a bout of it. I've not had a really bad run for a while, so hopefully I'll just get a couple of two-day bouts and be done with it.
yey my first good question badge... @Polynomial wanna throw in your answer too? security.stackexchange.com/q/36135/20074 This usually varies greatly contry to country, and I don't think we have a UK perspective on it yet... Rook is from US, right?
@Polynomial I've mentioned skimmers that can also write to the next card inserted what it read from the previous one... you have any info on those maybe?
@Polynomial I know the feeling. It feels naughty to yell on someone in The DMZ for hours about doing something the "right" way and then just going and doing the opposite.
@Polynomial personally I try to practice what I preach. Eg, I live with a bunch of other people, and I have a firewall between my computer and the rest of the house/router :P
@LucasKauffman Nah, that would be presumptuous. While I think several of our candidates would be less than ideal, we definitely have some crotchety grumpuouses on the list, there's a bunch of names that people recognize and seem to respect.
@Everybody Today I've received my new laptop and I have to free my current one so they'd give it to one of the new interns. Any tips? (I've already backed up and used DBAN on the whole disk)
@AviD Requirement? No. But we've had 293 views on the Candidate Questionnaire question and 621 people vote. Most of them are probably just voting based on names and/or gravatars that they recognise and haven't pissed them off.
@LucasKauffman But wait.. that's awesome. I'll tell you why
Led is very easy to deform, so it will be deformed once it hits the target, which means it won't penetrate much. But with this steel head, it will penetrate very deep.
My computer is connected to my Netgear router which is also the switch for my network, this in turn is connected to my cable modem which is just a bridging device.
My router is blocking scans and fragmentation attacks but I believe its processor and RAM is getting hammered doing so because my LA...
Me -> Node A -> Node B -> Node C -> destination
The documentation on TOR always states that only the exit node C can see plain text data. How is this possible without me talking to Node C directly?
If I have some plain text data, and want to send it encrypted to Node A, I'd usually do a Diffie-...
First, let me apologize if any of this question is naive or beneath the scope of this board. Bear in mind the context and that I'm asking as an attempt to exhaust all resources.
Also, I understand if not all of my parameters can be met, but having more facts and knowledge is just as helpful as a...
@TerryChia It doesn't require it even IMO... I don't think there's any technical solution to that last question I linked... The OP's friend should either go full Amish, or OP should start agreeing with him and they deal with it psychologically
You know, I might not like all aspects of this company, but I really like that we use SVN for our version control, we use Mantis for our bug reports and general ticketing, we use Lync to make communication easier. It's just really nice.
@lynks We use both (I use git for one project). There's only one thing I like about git and I wish if SVN had it - you can build your own local repo. You can commit your code and track it yourself without messing the build.
Right now I'm setting up an API, to be consumed on the client-side to set up a directory site. I'm wondering what extra steps I need to take just to prevent people from gaining write access to the data.
Some notes:
The API / database has no private information. All information is available and...
Create a .php file.
Add the following to it: phpinfo();
Locate Loaded Configuration File
That's the file you need to keep maintaining.
Me -> Node A -> Node B -> Node C -> destination
The documentation on TOR always states that only the exit node C can see plain text data. How is this possible without me talking to Node C directly?
If I have some plain text data, and want to send it encrypted to Node A, I'd usually do a Diffie-...
