658 reputation
215
bio website johngraybosch.com
location
age
visits member for 1 year, 10 months
seen Apr 8 at 20:36

I'm an Application Developer in Long Island, NY.


May
6
comment VCS to manipulate returned trees to prevent leaks?
Ahh, I see you're asking a hypothetical question about what the big boys do. I agree with @Adnan about the NDA. Nobody wants to lose their house in a lawsuit ;)
May
6
answered Securing a network attached storage on the internet
May
6
comment Safe to connect to external drive?
If you're very concerned, you could boot to a Live CD and copy the files that way.
May
6
comment VCS to manipulate returned trees to prevent leaks?
Are you trying to prevent your developers from leaking your code to the outside world? That's a trust issue... If you can't trust them with your code, why are they in your network?
May
6
comment How can Bank of America tell that I'm logging in on a computer I haven't used with them before?
Thanks, Xander. The linked question with the LSO piece helped to clarify things.
May
6
accepted How can Bank of America tell that I'm logging in on a computer I haven't used with them before?
May
6
comment How can Bank of America tell that I'm logging in on a computer I haven't used with them before?
I've clear my cookies and it doesn't re-prompt me. Cookies was my first thought too, but that rules it out.
May
6
asked How can Bank of America tell that I'm logging in on a computer I haven't used with them before?
May
2
accepted US Department of Labor Watering Hole Attack
May
2
comment US Department of Labor Watering Hole Attack
So it appears that from a web developer's point of view, the lesson from this article is guard against XSS vulnerabilities. I'm surprised you can execute arbitrary code from JS though...
May
2
comment US Department of Labor Watering Hole Attack
@Xander thanks.
May
2
comment US Department of Labor Watering Hole Attack
"use a more modern browser" it affects all unpatched versions of IE technet.microsoft.com/en-us/security/bulletin/ms13-021
May
2
comment Is the execution time for bcrypt independent of the length of the input string?
Ok, I just took a guess. This guy actually knew the answer. I deleted my answer because it was incorrect.
May
2
asked US Department of Labor Watering Hole Attack
Apr
30
awarded  Popular Question
Apr
12
awarded  Good Question
Mar
11
comment Can JavaScript be used to install malware?
I understood what you meant: If you turn off everything else, and just go with plain vanilla HTML, CSS, and JavaScript, you're still vulnerable.
Mar
8
comment Can JavaScript be used to install malware?
Thanks. I also found a good answer on this question: security.stackexchange.com/questions/20140/…
Mar
8
accepted Can JavaScript be used to install malware?
Mar
8
asked Can JavaScript be used to install malware?