1,140 reputation
28
bio website michaelhendrickx.com
location Dubai, United Arab Emirates
age 33
visits member for 2 years, 1 month
seen Jul 24 at 9:09

Entropy isn't what it used to be.


Jul
20
comment Old Tool: S.A.T.A.N. (a.k.a. S.A.N.T.A.)
A security scanner is only as relevant until the bugs it exploits are relevant. You're talking about a tool that's 20 years old...
Jul
16
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
Sniff your TCP connection/do a netstat, see what server your browser talks to, verify if that's a proxy. Else, WPAD's wiki page gives you info how a browser finds its proxy server.
Jul
16
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
Your browser probably uses the web proxy autodiscovery protocol. You can try to get the PAC file yourself, and set the proxy address. Alternatively, call your internal helpdesk for the proxy address (say you can't surf), or try to ping proxy.<domain-name>.
Jul
15
comment How to configure Burp suite in browsers while my internet connection works behind proxy.?
If your browser is setup to use a proxy (could be pushed by active directory), then normally it are those values.
Jul
15
comment Perform THC-Hydra Dictionary attack on Microsoft forefront TMG login
Not an answer by far, but aren't there any log files that would give you more information on how he/she compromised the system?
Jul
9
comment Tor IP and cookies in hidden services
On another note, using JS people could find out if you're using Tor or not by linking resources from the "deep web".
Jul
7
comment Tor IP and cookies in hidden services
The hidden services is in my other comment, it seems to be anonimized. RFC1918 are internal addresses, like 10.0.0.2.
Jul
7
comment Tor IP and cookies in hidden services
this paper indicates that .onion sites are accessed through a rendez-vous point and is anonymized.
Jul
7
comment Apache redirecting to unsecure port
What do you redirect to? Do you include the schema? Are you listening on both 80 and 443?
Jul
7
comment Tor IP and cookies in hidden services
What's a hidden service?
Jul
3
comment Are two firewalls better than one?
Although a valid opint, the question stipulates firewalls "after" each other, and not in a HA setup.
Jun
30
comment How do I secure my REST api that is being accessed by only one application?
If "they" can read SSL, then yes. But that would mean that they have access to either server, or do a successful MitM. The seconds one being unlikely (if you implement it right)
Jun
30
comment How do I secure my REST api that is being accessed by only one application?
The other questions was more about SSL communications and sessions, this seems to be app <-> app authentication.
Jun
25
comment How to become Intermediate Certificate Authority?
If your end users are your branch organizations, then you can install your CA cert on their machines. If you want to create certificates "for your branch organizations" to serve to the rest of the world, then you need to sign up with a CA.
Jun
23
comment Why do WordPress installations retrieve the crypto secrets remotely on installation?
Great material for a conspiracy theory. :)
Jun
17
comment Log file checksums
@random24234 - If they didn't have the file in the first place, it can never be modified from a previous version. As far as they know, it's the first version. Unless the application itself keeps some sort of versioning/document control.
Jun
12
comment Identity theft from ubuntu machine?
To be honest though, if the Ubuntu box is misconfigured (ssh open, weak passwords), it may be compromised and a keylogger installed.
Jun
8
comment Are legal notices in a login banner legally significant in terms of computer misuse?
Not sure, if a doormat says "welcome", it doesn't mean you can break in. No judge would go for that.
Jun
4
comment Monitoring user use VPN
Actually it can; the company can enforce screen capturing software, or even a browser extension that traps all data.
Jun
2
comment Using a virtual machine for increased layer of privacy (w/ tor)?
I think it's be safer to run the proxy from the VM itself; and connect through localhost:8118 (or so, this is privoxy's default). Best is not to bother with your host OS at all.