2,492 reputation
315
bio website
location Tulsa, OK
age
visits member for 2 years, 6 months
seen 5 hours ago

15 years enterprise IT / Infosec experience and counting...


6h
comment Are there any two way + two factor authentication systems in use?
@RoryAlsop I modified my out of band statement to be more accurate. However, if the premise is that it's not out of band because it can be compromised, then nothing can be truly out of band.
6h
revised Are there any two way + two factor authentication systems in use?
modified out of band statement
7h
comment Detecting RDP on non-standard ports
@schroeder Yes, now the OP clearly states network monitoring. When I answered the question it was not specific to network monitoring.
12h
comment Detecting RDP on non-standard ports
@rbialon 3389 is the default port for MS-RDP. Occam's Razor would suggest the OP is referring to Windows systems.
12h
revised Are there any two way + two factor authentication systems in use?
added image for clarity.
13h
answered Are there any two way + two factor authentication systems in use?
13h
comment What can I do if someone is using my IP address?
Torrenting content illegally is a crime - just sayin'.
13h
answered Detecting RDP on non-standard ports
May
20
comment Locking access to remote DB from a freely downloadable app (that acces the DB)
And always implement stored procedures when possible. Do not allow raw queries to the DB.
May
19
comment What is risk of having memcache in public interface?
The documentation I've read seems to indicate the application is susceptible to stored cross site scripting versus reflected - in which case social engineering isn't required. Also, please read the article over data ex-filtration. The person was able to extract cached data from mem cache. If any sensitive data was cached (userID's, passwords, connection strings, etc) it could have been compromised.
May
19
comment What is risk of having memcache in public interface?
Is "memcache" and "memcached" the same product?
May
18
comment Threat modelling tools and alternative threats
You might look into "SeaSponge". I haven't used it myself, but it's supposed to be tailored towards SysAdmins.
May
18
answered Separate web and app server windows authentication
May
18
answered What is risk of having memcache in public interface?
May
16
comment What can I do as a user to minimize the risk of online banking?
To further Andre's (sorry, don't know how to make the special e) point on the first bullet, technology has emerged that allows infosec personal to either A.) Block Tor users from accessing their websites or B.) Limit the functionality of a Tor user while they are logged into a website. The reasoning is that a typical user does not use Tor, however, nefarious types who want to remain anonymous are more likely to use Tor.
May
15
comment Monitoring Active Directory Domain Administrator Activities
There are companies that offer Advanced Threat Analytics (hint, hint) solutions that may fit your needs. Unfortunately, I cannot recommend a specific vendor.
May
13
awarded  Mortarboard
May
13
answered Choosing security scenario for WCF service/client hosted by IIS
May
13
revised Security benefits to have IP-filter in HttpModule instead of Page-Load in asp.net pipeline?
added image.
May
13
comment Security benefits to have IP-filter in HttpModule instead of Page-Load in asp.net pipeline?
FWIW, IP address restrictions can be placed on one page specifically.