1,282 reputation
210
bio website k1DBLITZ.com
location
age
visits member for 2 years
seen 4 hours ago

15 years enterprise IT / Infosec experience and counting...


Nov
3
comment How do I block a blogspot site using hosts file?
Are you on a network that is using a proxy server?
Nov
1
awarded  Yearling
Oct
31
revised Can anyone be hacked?
formatting.
Oct
30
answered Where to place a vulnerability scanner within a data center
Oct
30
answered Can anyone be hacked?
Oct
30
comment Can anyone be hacked?
Wow...dude... you went off the deep end. :) Schroeder's response is obviously coming from a real world corporate background - at least that's what I'm seeing in his response.
Oct
23
answered How can I verify that SSLv3 protocol is disabled?
Oct
16
revised Web Application Vulnerability Scan- False Positives-Recognizing and Eliminating
added 1 character in body
Oct
15
answered Web Application Vulnerability Scan- False Positives-Recognizing and Eliminating
Oct
8
answered Is TCP more secure than UDP?
Sep
30
comment Internal IP addresses allowed access to all DMZ hosts
Correct. In my opinion, the chance of a workstation being compromised by an outside attacker is exponentially higher than a server being compromised by an outside attacker. Workstations are operated by users who have a propensity to click things, have some form of direct internet access, and tend to use highly vulnerable programs like Flash or AdobePDFs. That attack surface of a workstation is greater than that of a server. This means the internal workstations cannot be assumed trusted from a DMZ point of view and should not have unrestricted / unfiltered access to DMZ assets.
Sep
30
answered Internal IP addresses allowed access to all DMZ hosts
Sep
26
comment Someone used my router to set up their own network
"The router only "broadcasts" a single network". That's not true. Many routers have a guest network, a 2.4ghz network, and a 5ghz network. All can have separate SSIDs.
Sep
25
awarded  Custodian
Sep
25
reviewed Approve suggested edit on The reason to insert Subject Alternative Names into CA certificate
Sep
25
answered The reason to insert Subject Alternative Names into CA certificate
Sep
24
awarded  Autobiographer
Sep
23
answered Server situated on two physical networks - Bad idea or not
Sep
23
comment SSL Certificate and IDS\IPS
A general diagram would be helpful. How is it that you don't have access to "an internal web server in our perimeter DMZ"? Why do you need to be routed to a third party to access a host already on your own network?
Sep
23
comment Does encrypting a setting in web.config actually provide security?
The last part Xander mentions in his reply is important. Not all exploits allow an attacker to take complete control of the system. Some exploits allow the attacker to download or access files that they shouldn't normally be able to access, like the web.config.