183 reputation
4
bio website
location
age
visits member for 3 years, 2 months
seen Oct 29 at 16:38

Sep
30
comment How does a browser know if a site supports https
Which browser are you using?
Aug
31
comment Does disabling IPv6 decrease my surface area of attack and increase performance?
"All of our internal IPv6-enabled networks were exposed to the internet." The real question here: why was this such a serious issue? I know people who have given up (I am not making this up, they told me explicitly they have given up) on knowing 1) what's installed 2) what's listening on a socket 3) what's a potential vulnerability, and I think it's terrible. Defense in depth in one thing, but you need to know which processes have listening sockets and potential vulns, or worms could spread from inside the border firewall (or NAT device).
Feb
3
comment Capture data that my ADSL modem send
What do master and slave mean in this context?
Jan
15
comment How to disable SSL for some websites in Chrome?
"This would probably throw an error in the browser that it is loading over an insecure connection" You would have to install the certificate of your TLS proxy on your computer, as a trusted certificate.
Sep
14
answered how can I force automatic filling to be enabled on webpages?
Jul
20
comment Can I build a VPN on top of Tor?
"Take a look at NoScript." It is a very useful extension (and it has an HTTP sandboxing feature). "Not loading all the external JS also prevents most of the tracking cookies." Websites can still "track" you with other means. "Does not matter how you call it." Using the proper terms matters a lot.
Jul
20
comment Can I build a VPN on top of Tor?
"do not load all those tracking cookies and Facebook widgets without my explicit permission". That is not what "sandboxed" means. A sandbox is an isolation feature. JS loaded from one site cannot read content from other sites, or from local files: that's isolation. And a tracking cookie is just a cookie; the browser cannot tell a tracking cookie from another cookie. You can blacklist several domains known to send tracking cookies, but it is not an isolation feature.
Jul
20
comment Can I build a VPN on top of Tor?
JS is "sandboxed" by default.
Jul
20
comment Setup Tor/vidalia with vmware workstation
I think you need to change SocksListenAddress 127.0.0.1 to SocksListenAddress 192.168.x.y.
Jul
19
comment Setup Tor/vidalia with vmware workstation
Your config file does not look right... I think you first need to determine the correct local IP address (maybe not 192.168.23.1), and then put in place of 127.0.0.1.
Jul
19
comment Setup Tor/vidalia with vmware workstation
"I tried to put it in torrc configuration from vidalia but it "doesn't recognize the action"." can you describe what you did exactly?
Jul
19
comment tor: how to have different ip address for every page request?
Why would anyone possibly want such a thing?
Jul
18
comment Must TCP use IP?
You might as well pretend that UDP is the same protocol as IP, because they offer extremely similar interfaces to upper layers: set a local and a remote endpoint addresses, send and receive packets...
Jul
18
comment Must TCP use IP?
IPv6 and IPv4 are similar, with similar interfaces for upper layers, but certainly not the same protocol and not strictly functionally equivalent either.
Jul
18
comment Must TCP use IP?
@TomWijsman Yes, it's TCP/UDP/IP.
Jul
18
answered Must TCP use IP?
Jul
18
comment Must TCP use IP?
What about IPv6?
Jul
10
comment How safe is Firefox password manager?
Holes Remain Open in Firefox Password Manager "they should not entrust their passwords to the password manager on web sites that allow other users to create their own pages containing scripts." answer: "It is not about safety of the Firefox. It is about safety of websites that allows users to insert Javascript code to their sites." conclusion: the password manager is "insecure" on sites which are inherently insecure.
Oct
16
comment Surveillance of teenagers / keylogging on a machine
"Surveillance / keyloggers of which they don't know is a breach in their privacy" And using a keylogger or any other kind of malware is teaching children that computer crime is OK.
Oct
16
awarded  Commentator