meta user
network profile
| bio | website | blog.k1DBLITZ.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 6 months |
| seen | 18 hours ago | |
| stats | profile views | 18 |
|
May 14 |
comment |
Somehow unexpectedly my computer got infected with malware @roxyfm - I recommend Qualys Browser Check to make sure your plugins/extensions aren't leaving you vulnerable. I would also run Secunia PSI and make sure all your programs are up to date. If you really want to take it to the next level, download the community versions of RetinaCS by BeyondTrust or Nexpose by Rapid7. |
|
May 13 |
revised |
Can one reliably show HTTPS status in browser (not just the lock in the URL bar)? grammar |
|
Apr 26 |
comment |
Is it safe to allow users multiple login at different browsers & computers? Keep in mind that gmail also tracks these logins and the user can view this history at any time, which includes Access Type, Location (IP address) and Date/Time stamps. The user also has the ability to sign out all other sessions. The user has the option to be alerted when unusual login activity is occurring. Does your application provide this functionality? Because if not, than they can't use gmail as an example to justify multiple multiple logins. |
|
Apr 25 |
answered | Mitigating the loss of a mobile phone used for second-factor login |
|
Apr 17 |
answered | Can one reliably show HTTPS status in browser (not just the lock in the URL bar)? |
|
Apr 15 |
comment |
For TLS how to instruct IIS 7 to include Intermediate CAs to be included in the Certificate Request frame? Odd, from my experiences if the client has the proper chain then you're good to go. Is the java client on a windows machine or unix machine? Java doesn't take advantage of the windows key/certificate store, it has its own. I'm assuming the java client is connecting via and can resolve the CN on the certificate issued to the web service, yes? |
|
Apr 15 |
comment |
get vs post which is more secure? In supplement to your answer, here is a nice table that outlines the differences between both: diffen.com/difference/Get_vs_Post |
|
Apr 15 |
comment |
Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it? Best TL;DR quote ever. I think I need to create a new stack in my evernote just for your answers. Do you author any articles or books by chance? |
|
Apr 15 |
comment |
For TLS how to instruct IIS 7 to include Intermediate CAs to be included in the Certificate Request frame? Is updating the java certificate store of the java client with the proper intermediate/root certificate out of the question? |
|
Apr 12 |
revised |
Why should I use the VPN? posed as a question to make more sense. op was a question in statement format. |
|
Apr 12 |
suggested | suggested edit on Why should I use the VPN? |
|
Apr 12 |
comment |
Firewall philosophy Nope, it doesn't. Pretty neat how it works. Websense integrates with your corporate internal Certificate Authority to generate certificates on the fly for SSL enabled domains. Since your browser will trust the certs issued from your own CA and the common name matches the connection is trusted. If you view the cert path when connecting via SSL you will see it resolves to your internal CA's root. Also keep in mind that browsers are bound to a different protocol specification when communicating with proxies. |
|
Apr 12 |
comment |
Firewall philosophy @schroder /facepalm It appears we shall agree to disagree. |
|
Apr 11 |
comment |
Firewall philosophy @schroeder No sir, I think it is you who are still missing the point. ;) Two scenarios were outlined above where "blindly blocking" at the firewall is key to preventing and controlling unwanted traffic. Only the proxy server should have access out on port 80 and 443 via fw policy. Only the mail server should have access out on port 25 via fw policy. The firewall is key to creating egress points where the respective applications should be filtering out the unwanted and dangerous traffic. I can outline many scenarios where blacklisting leaves a network vulnerable, but there is a character limit. |
|
Apr 10 |
comment |
Firewall philosophy @droope Websense does it out of the box. The traffic is decrypted, inspected, then re-encrypted before passing it back to the user. This effectively thwarts the OP's scenario. |
|
Apr 10 |
comment |
Firewall philosophy @schroeder I disagree. Blocking is key. A fundamental principle of security is operating by least privilege. |
|
Mar 26 |
comment |
Why are GPUs so good at cracking passwords? They are defined as cores: cdn3.wccftech.com/wp-content/uploads/2013/02/… From a pure processing power perspective, the Titan is 14.2 times faster than the current fastest equivalent costing CPU. |
|
Mar 26 |
answered | If an ATM is stolen, how easy can the personal information of the users be recovered? |
|
Mar 26 |
answered | Has my network/computer been breached? |
|
Mar 11 |
revised |
Secure single page in a site if site is hacked? added 227 characters in body |
