Reputation
2,588
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
3 15
Newest
 Mortarboard
Impact
~98k people reached

Aug
24
comment What is the proper setup procedure for SSL Tunnel certificates?
Just a hunch.... but Niagara use a Java framework if I'm not mistaken. Which means it's likely this subsystem that fails to work is using the Java Keystore, which will not contain the trusted root of the customers CA. Combining the cert chain is a workaround. You might try going down the path of importing the customer's root into the java keystore.... or.. it may end up being a waste of time. :) Sorry, I have no direct experience with Niagara.
Aug
20
comment Why do we still use keys to start cars? why not passwords?
Parking lot predators would vote for a combination lock. It would keep their victims distracted longer.
Aug
19
comment Options to protect an outbound initiated connection IP?
Sorry if I'm not following correctly as I'm a visual person, but it sounds like you might need to deploy a load balancer - or "Application Delivery Center" such as an A10 or F5 appliance that is hosting a VIP? As the crux of your issue relates to "we have no quick means to change that IP within all the customer configurations if we have an issue."
Aug
19
comment How to block detour programs that bypass firewalls?
This is where an explicit proxy can be beneficial. Some of the same pitfalls remain, but one could argue chances of bypassing are reduced. Many explicit proxies support decrypting SSL (MitM style) and categorizing URL's on the fly through real time analysis. Yes, it's true that some firewalls support SSL inspection but usually throughput suffers as a result. Have you subscribed to a category DB like Websense for filtering? If so you should consider blocking all remote/proxy categories. It's not a perfect "catch all" solution, but does get you a little farther down the road.
Aug
19
answered BadUSB: Why are firmware writeable in the first place? Manufacturer's backdoor?
Aug
10
comment Is it dangerous to have the built-in Administrator account enabled?
Think of it this way... just because the admin account is "never" used doesn't mean that it "can't" be used. (if someone cracks or learns of the password) There are guard rails along highways with dangerous cliffs that have "never" been used. (thank goodness) but they are there none the less. Should they be removed because they are "never" used? Think of disabling the admin account as adding a guard rail alongside a dangerous cliff on the highway. It's a precautionary measure.
Jul
28
answered Identify Malicious/Suscipicous Processes from Process List
Jul
27
comment Force a specific SSL cipher
I just used the method in the answer and it worked great. Often times the ciphers reported by the scanning tool don't align with the cipher name that must be specified in OpenSSL. There is a handy list located at: openssl.org/docs/apps/ciphers.html
Jul
23
comment Is it possible to exploit an image field in which I can upload any file?
You might give this a watch: youtube.com/watch?v=NPqVVhxhqmY "The Little JPEG That Could (Hack Your Organization)" Even it's not susceptible you'll learn something really cool. :)
Jul
10
revised indicators of compromise via email servers
grammar, punctuation.
Jul
8
comment Implications of IP Address as Subject Alt Name in certificates
Heads up, if this is going to be used on an internal server - the use of IP's is going to be deprecated. symantec.com/connect/blogs/transition-non-fqdn-server-names
Jun
30
comment Fiddler show external requests but not initiated by any legitimate process
For the time being, you could add an entry in your hosts file to route www.google.pl to 0.0.0.0 until you can track this thing down.
Jun
26
revised Fiddler show external requests but not initiated by any legitimate process
grammar
Jun
26
answered Fiddler show external requests but not initiated by any legitimate process
Jun
22
comment Is there a way my organization can collect clients' sensitive documents without being liable for them?
You're already liable to be GLBA compliant for handling sensitive customer/financial data. (if you're in the US or doing business with a US company) Please review: ftc.gov/tips-advice/business-center/privacy-and-security/…
Jun
10
comment Is it secure not to have csrf protection in login forms?
@Aatif Please provide an example of how the Worpress Admin panel is susceptible.
Jun
10
revised Is it secure not to have csrf protection in login forms?
clarify in reference to wordpress
Jun
10
answered Is it secure not to have csrf protection in login forms?
Jun
8
revised What do I do if I find XSS on my website?
clarifying that this is in reference to reflected XSS as Stored XSS is indeed server side.
Jun
5
comment Can a wifi provider decrypt HTTPS usind MITM without users noticing?
Or use SSLstrip, though sites are starting to protect against this.