1,112 reputation
110
bio website
location
age
visits member for 1 year, 11 months
seen 1 hour ago

15 years enterprise IT / Infosec experience and counting...


20h
comment Internal IP addresses allowed access to all DMZ hosts
Correct. In my opinion, the chance of a workstation being compromised by an outside attacker is exponentially higher than a server being compromised by an outside attacker. Workstations are operated by users who have a propensity to click things, have some form of direct internet access, and tend to use highly vulnerable programs like Flash or AdobePDFs. That attack surface of a workstation is greater than that of a server. This means the internal workstations cannot be assumed trusted from a DMZ point of view and should not have unrestricted / unfiltered access to DMZ assets.
20h
answered Internal IP addresses allowed access to all DMZ hosts
Sep
26
comment Someone used my router to set up their own network
"The router only "broadcasts" a single network". That's not true. Many routers have a guest network, a 2.4ghz network, and a 5ghz network. All can have separate SSIDs.
Sep
25
awarded  Custodian
Sep
25
reviewed Approve suggested edit on The reason to insert Subject Alternative Names into CA certificate
Sep
25
answered The reason to insert Subject Alternative Names into CA certificate
Sep
24
awarded  Autobiographer
Sep
23
answered Server situated on two physical networks - Bad idea or not
Sep
23
comment SSL Certificate and IDS\IPS
A general diagram would be helpful. How is it that you don't have access to "an internal web server in our perimeter DMZ"? Why do you need to be routed to a third party to access a host already on your own network?
Sep
23
comment Does encrypting a setting in web.config actually provide security?
The last part Xander mentions in his reply is important. Not all exploits allow an attacker to take complete control of the system. Some exploits allow the attacker to download or access files that they shouldn't normally be able to access, like the web.config.
Sep
23
answered Can Subject Alternative Name(SAN) Certificate install on different Web Server or OS?
Sep
22
comment Pentesting an ATM OS upgraded from Windows XP to Windows 7
Just an FYI, there is no upgrade path from WindowsXP to Windows7. Meaning, if they went from WindowsXP to Windows7 it's essentially a fresh installation of Windows7.
Sep
22
comment Is there any danger in allowing users to host PDF/RTF/DOC files on my web server?
In reference to abacabadabacaba's comment, review this video: vimeo.com/103938583 A simple jpg upload functionality contributed to an internal domain controller being compromised.
Sep
22
comment Can a system administrator see if someone is using a VPN?
"OK... I'm really asking for a friend tho :P" That's what THEY always say too. ;P
Sep
18
revised Does a separate internet connection increase security for remote users?
added 256 characters in body
Sep
18
comment Does a separate internet connection increase security for remote users?
"I, myself, have made the same request to a certain remote employee to ensure separation of use within that employee's home." How does this ensure separation? What prevents another user in the home from using this same separate connection? What prevents the user from connecting other devices to this same separate connection? Unless you're also deploying a corporate owned and controlled router at the end point, you haven't really ensured anything except that the employee now has a higher monthly internet bill.
Sep
17
answered Does a separate internet connection increase security for remote users?
Sep
12
answered Apply SSL for domain that I do not own
Sep
11
answered How a trojan allows attacker to connect to remote computer behind a router
Sep
9
comment How to check whether firewall allows traffic on specific port but not listening on the port
If it's available, use Telnet.