1,084 reputation
1612
bio website zv.github.com
location United States
age 22
visits member for 4 years, 8 months
seen Sep 23 at 6:54

I taught myself programming on a recycled Compaq 9071GL running Mandrake at the tender age of 12 and have been debating compilers ever since.


Jun
21
comment MITM attacks - how likely are they?
@Craig, I think suffice to say, the threat is real, but with a relatively peaceful global political climate (I say relatively in relationship to say, World War 2), Its unlikely that any actors will take advantage of this scenario.
Jun
21
comment MITM attacks - how likely are they?
Well, As far as DNS is concerned, semi-obviously you could just send the packets to the ACTUAL IP of the site you are attempting to reach. And it is possible to do things like rapidly switch between the connect and active states for BGP whilst sending out the REAL BGP routes. Or, if like most of the internet, There exists an alternate route to your host besides the route you poisoned, you could specify that as a routing parameter. However, Its great that you are interested in this Craig, Security is quite a field, when you think you've got something sorted, something else pops up.
Jun
21
comment MITM attacks - how likely are they?
I prefer Zephyr, but yes, MiTM extends beyond the local network.
Jun
21
comment MITM attacks - how likely are they?
@Dennis - The premise that farseeker has espoused implies that many hackers are trying all number of attacks, as well known or theoretical as they may be on many different types of systems in the world, this simply is not the case. Talented attackers are capable of significant things, this firstly doesn't imply they are behind all significant things nor are they capable of all significant things.
Jun
21
comment MITM attacks - how likely are they?
Farseeker, Plenty of exploits are never tried against targets. I think you widely overestimate the number of actively working computer hackers ("Crackers" for the pre-1990s hippy mystique). AV firms may have you believe the number to be in the millions, in reality, It probably rarely tops 10k at any given moment. If even.
Jun
21
answered MITM attacks - how likely are they?
Jun
12
comment Does Wireshark pose a threat when installed on a server in the DMZ?
Keep in mind, Due to the nature of Wireshark, many of the dangerous bugs are not buffer overflows (Which are fairly easily mitigated in the modern world), but are rather parsing errors like use-after-free attacks or Invalid pointers exploitable through heap spraying (Of course instead of spraying the heap with Javascript as you would with other client side attacks like web browsers, You would do so with network traffic)
Jun
12
answered Does Wireshark pose a threat when installed on a server in the DMZ?
May
28
answered Generate a limited amount of random network traffic between 2 hosts
May
24
accepted Automated VLAN creation with residential Wireless devices
May
24
asked Automated VLAN creation with residential Wireless devices
Apr
7
answered Does removing admin rights really mitigate 90% of Critical Windows 7 vulnerabilities found to date? as reported by beyondtrust.com
Mar
3
comment How To Treat Any File As PHP In Windows IIS 7?
LFI and RFI come to mind as problems, if you truly are the only one who has access its not a problem but god forbid it ever goes production.
Mar
2
comment How To Treat Any File As PHP In Windows IIS 7?
Though this may not be a concern for you, you are setting yourself up for an astoundingly large security hole.
Mar
1
comment How to physically secure a public terminal?
I just thought I'd add on that you can get some of those flexible keyboards. ( google.com/products/… ) Have one around here and they are nigh indestructible.
Mar
1
answered Firewall choice for Windows Server
Mar
1
answered Preventing VPN connections for clients that have no active virusscanner
Feb
28
answered What are some good security audit tools for PHP web applications?
Feb
28
comment How can I disable encryption on openssh?
96 bit MD5 is incredibly quick in any case.
Feb
26
revised Securing Acrobat Reader to mitigate viruses
added 139 characters in body