Aki

56m
comment What non malicious uses are there for ping's flood (-f) option?
It's by far the worst tool available for this purpose though
Feb
26
comment screen scraping using Ghost.py
it did not for me
Feb
23
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
And adding to that, defense level actors are working together with such firms of course, access to foreign technologies to empower local companies is a day-to-day activity for the spying business. I want to stress that nothing changed, Chinese companies put malware as Cisco and other companies add backdoor and channel out data to others. It is the same, it is a matter of trust and strategy, do not overreact and work on your company strategy would be the best.
Feb
23
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
@RоryMcCune: Sorry my English is not that great, I did not mean to suggest defense level companies would be a threat. More to compare how they defend against those threat because there is a high value to doing so. For companies, you can try to go as far as them, until the cost/benefit ratio exceeds your budget and strategy. >What are the security risks of having OEMs or other companies installing this kind of software onto customers systems? The risk has always been present in the mind of security professionals, vendors identified as non-secure will be avoided, as always.
Feb
20
awarded Supporter
Feb
20
comment why do phones have sim cards?
Basically you propose to always have a sim in the phone when you buy it (if you think about it, you can think of such phones as sim free). It exists. To remove the sim card means to still have the data in the phone, it's just a flat design easier to maintain and diagnose for operators/phone manufacturers.
Feb
20
comment Certificate advice for deploying code-signed software as a 3rd party vendor
You can just put it in the agreement signed by both parties an obligation to protect the certificate. You could have one especially for this project and only give it to the dev company? So if it leaks, you can point your finger at them. Definitely sign your applications, but most importantly teach users to only download it from a trusted source. Also, regular audits should also focus on checking sensitive applications are legits (cksum...)
Feb
20
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
Defense level companies control the whole manufacturing chains. This kind of attacks are not new. For organizations, it might make sense to select vendors based on their reputation. This kind of news about Lenovo and others should definitely influence the market at some level. It does not mean your grandmother needs a Chinese-only laptop (assuming you are Chinese).
Feb
16
awarded Altruist
Feb
12
comment I was told to do X if Y
In the first example, are you intentionally using the plain form 出る as an imperative? -> No, if I paused before submiting this sentence I would probably have changed it to 出て :(
Feb
12
comment I was told to do X if Y
Thank you, this is very helpful to me
Feb
12
accepted I was told to do X if Y
Feb
11
comment I was told to do X if Y
電話が鳴ったら早く電話に出ると言われました / それが出来ると課長に報告してと言われました. But we'll end up focusing on my very low Japanese instead of answering the question about possible patterns to express what I want to express. Although I would never be relunctant to any help on those sentences.
Feb
11
asked I was told to do X if Y
Feb
10
awarded Investor
Feb
6
comment python to mssql encoding problem
worked for me :)
Jan
20
comment How much TNT do you need to blow up the moon?
Where do you lay this TNT dwarf planet to have the calculated impact? On top of the moon? Smear it across the surface? Pretty sure that'd change a lot of things
Jan
5
comment Firefox Flash plugin malware?
@sourcejedi: I disagree because I repeat it, chrome does not support NoScript and browsing without no script is just screaming to get hacked. Of course flash is an issue, and it will always be.
Dec
19
awarded Popular Question
Dec
10
accepted Ternary operator vs if statement: compiler optimization
1 2 3 4 5