319 reputation
14
bio website
location
age
visits member for 2 years, 2 months
seen Jun 15 at 12:48

May
27
awarded  Yearling
Jun
8
comment Securing a multi-tenant architecture
No, you can use more than 1 https certificate per ip address with newer ssl library ( ie, using SNI serverfault.com/questions/109800/… )
Jun
6
answered Detect what is running on an open port?
Jun
6
comment Limiting database security
If you can lock tables with SQL, you can manage to make everybody wait on the lock. But that requires SQL access. You can also take lots of ressources with crafted query ( either one that fill the DB, or the memory, or the cpu, or the 3 at the same time ). I would also look at someone would could play with permissions ( like removing privileges in mysql, changing owner on postgresql )
Jun
6
answered Using Python for security
Jun
1
comment Can a hypervisor rootkit enable hardware-assisted virtualization when it has been disabled by the BIOS?
Well, there is no standard programming or documented interface to change BIOS settings afaik, but maybe some BIOS have it. The same goes for virtualization. And changing BIOS settings is just writing some bytes in the BIOS flash memory, so is flashing the BIOS, ie that's the same process, just on different memory address, hence my answer. Now, if that for the processor, I doubt. The main usage was to sell the same hardware but cheaper without HAV and to block this in BIOS, so I assume you cannot bypass the BIOS for that.
Jun
1
revised Using TPM with DMcrypt?
added 250 characters in body
Jun
1
answered Can a hypervisor rootkit enable hardware-assisted virtualization when it has been disabled by the BIOS?
Jun
1
answered Using TPM with DMcrypt?
May
28
awarded  Supporter
May
28
awarded  Analytical
May
28
comment Securing a multi-tenant architecture
Stealing the certificate is nothing magic. If the webserver need to be able to read it ( for https ), then code executing in the webserver ( like, let's say, mod_php ) can also read the certificate. There can be various restrictions however, but that's something to keep in mind. And indeed, there isn't much difference with the 2 approaches. I would say that if you later have enough money for 1 cert per domain, the first approach would permit a easier migration.
May
28
awarded  Editor
May
28
revised Securing a multi-tenant architecture
added 270 characters in body
May
28
answered monitoring outgoing network traffic
May
28
answered Securing a multi-tenant architecture
May
28
awarded  Teacher
May
27
answered 1and1 Dedicated Server got compromised (Windows Server 2003)