594 reputation
413
bio website tcpiplab.com
location Southern California
age
visits member for 1 years, 8 months
seen Mar 2 at 18:29

IT Security, web development, Perl, Mac, etc.


Aug
22
comment How useful or beneficial is participating in CTF contests for my security career?
Oh ya, for clarity I should add that I'm referring specifically to live CTF contests, not the website-only CTF sites where you log in and hack at your leisure. I'm thinking about the type of CTF contests they have at DefCon, DerbyCon, etc. --Thanks.
Aug
20
answered Best way to handle identity theft incident?
Aug
20
answered Fostering an environment where honesty and disclosure are valued
Aug
20
asked How useful or beneficial is participating in CTF contests for my security career?
Aug
20
awarded  Editor
Aug
20
revised How to safely view a malicious PDF?
Added info about using "strings" on Windows, thanks to Polynomial's comment.
Aug
20
answered How do I improve the physical security of a rack cabinet?
Aug
20
answered How to safely view a malicious PDF?
Aug
20
comment Is there any technical security reason not to buy the cheapest SSL certificate you can find?
Update: Thanks to Andy Smith's comment, above, I went with the free basic domain validation certificate from startssl.com. The request process, and delivery, everything, worked as expected. But I must say that their web interface was exceedingly slow and clunky. But the certificate is recognized in 99% of all browsers, like certs from most CAs.
Aug
15
awarded  Nice Question
Aug
14
awarded  Student
Aug
14
asked Is there any technical security reason not to buy the cheapest SSL certificate you can find?
Aug
9
answered Where should I go from here to be a pentester?
Aug
9
comment wireless: Jamming or interference?
Anecdotally, I've had good luck choosing channel 11 in congested areas. Don't know why that is.
Aug
8
comment Password resets - what practices should web services follow?
But be ready for the more cumbersome steps at the end, wherein you generate a separate password of 16 random lowercase characters for each non-browser app that will access your Gmail account, e.g, Outlook. So the more apps you have accessing your Google account, the less likely you'd be to ever change your Google password.
Aug
8
comment Password resets - what practices should web services follow?
I just now set up the 2-factor authentication settings offered by google at the link you provided. It is an excellent system, with an easy set up process: SMS to your phone for a one-time code for authorizing an unknown computer to access your Google credentials, etc.
Aug
8
awarded  Supporter
Aug
8
answered Exclude file names from mod_security patterns
Aug
8
answered Web Application Firewall Rule Optimization
Aug
8
awarded  Teacher