298 reputation
111
bio website randomsoftware.tumblr.com
location United States
age 32
visits member for 3 years, 6 months
seen Aug 17 at 19:19

My thoughts
Me on launchpad PPA
Evidently one of my mini-apps was useful enough to make it on to Webupd8
Do you use/like that app? Maybe you want to help fund a cryptogram game

Hit my daily rep cap for the first time Nov 22 2010
Just made it to page 3 ons SU on dec 31 in users ranked by rep..
yay....first gold badge. unsung hero

I use various linux distros as my primary OSes of choice(tending to stay away from rpm based).

Moving into using FreeBSD as my primary OS.

--Resume--

Degrees
BS:IT focus Network Security
MS:ISA

Certifications
G2700
Certified Ethical Hacker, CHFI, EDRP
CCNA, CCNA Security, CCIE Candidate(CCIE written now expired, the others are current)
MCITP Enterprise administrator server 2k8/Vista
Network+, Security+, Project+(all lifetime)
CIW Associate, Professional, Javascript, Database
CNSS 4011 recognition

Accomplishments
1st in the state, 6th in the nation networking concepts Phi Beta Lambda leadership conferences (it's like the college version of FBLA)
On the national science olympiad team from my high school
Kenpo - black belt

Experience
7 yrs in small business IT services (varied)
--/Resume--

Favourite quotations:
"A failure to plan on your part does not constitute an emergency on my part" --Unknown
"If debugging is the process of removing bugs, then programming must be the process of putting them in" --Edsger Dijkstra


Jun
29
awarded  Autobiographer
Jun
27
comment Options when defending against SSLstrip?
You're totally missing the point. I'm not saying from the server hosting side e.g. mydomain.com. I'm saying from a local proxy for a LAN before ever leaving. I'm convinced at this point you're intentionally just being difficult.
Jun
26
comment Options when defending against SSLstrip?
It would prevent a mitm-ed user from fetching non-http assets. Instead of a "Paypal" banner it would display "you have been hijacked". Hence, they don't continue entering data. Hence it is useful.
Jun
26
comment Options when defending against SSLstrip?
@curiousguy Forcing https at the proxy as stated in the question(we're talking local proxy in a business case). If someone tries gets any assets via http, you replace all assets with "you have been hijacked." I thought that was relatively clear from the statement.
Mar
22
comment Most Efficient way of Encrypted Chat
no why on the -1? it's for sure the 'simplest' peer reviewed crypto chat setup
Mar
22
answered Most Efficient way of Encrypted Chat
Mar
22
accepted Looking for a tutorial on meterpreter extensions
Mar
22
revised Looking for a tutorial on meterpreter extensions
deleted 173 characters in body
Mar
22
awarded  Scholar
Mar
22
awarded  Peer Pressure
Mar
22
accepted Is there a Snort rule that equates to “something suspicious flagged from a client side application?”
Mar
22
comment Is there a Snort rule that equates to “something suspicious flagged from a client side application?”
Thanks I think you nailed it more in the question with 'No, there are too many client-side apps to catch them all'. And no there is no standard rule for appname field thinks eventid Y is causing problem level z.
Mar
22
comment Is there a Snort rule that equates to “something suspicious flagged from a client side application?”
Thanks, I know I could define a rule for just about anything. I just wasn't sure if a rule existed for 'client side app alert'
Mar
22
asked Is there a Snort rule that equates to “something suspicious flagged from a client side application?”
Mar
9
comment In Linux, when I consider trusting a new software source, what do I need to evaluate?
Agreed. I might add that some distros just say 'requires software from unsigned sources' when the gpg key is not already imported or the software is unsigned. A much better idea.
Mar
7
awarded  Student
Feb
10
awarded  Yearling
Nov
30
comment Looking for a tutorial on meterpreter extensions
I +1'd the post btw
Nov
30
answered Looking for a tutorial on meterpreter extensions
Nov
20
comment Looking for a tutorial on meterpreter extensions
thx. i wound up having someone on IRC send me a link to one of mubix's articles. it doesn't inject directly into memory...as in it requires upload first, but it's a starting point