1,132 reputation
110
bio website
location
age
visits member for 1 year, 11 months
seen yesterday

15 years enterprise IT / Infosec experience and counting...


Sep
12
answered Apply SSL for domain that I do not own
Sep
11
answered How a trojan allows attacker to connect to remote computer behind a router
Sep
9
comment How to check whether firewall allows traffic on specific port but not listening on the port
If it's available, use Telnet.
Sep
9
comment What kind of factor is a physical signature?
..I don't know about you guys, but I can't even reproduce my OWN signature identically every time. :D
Sep
5
comment Can eavesdropping be facilitated by injecting content that will be transmitted?
Is the card data at Bank A encrypted at rest?
Sep
5
revised What is the danger or downside of using online/cloud web app scanner vs on premise ones?
added 118 characters in body
Sep
5
answered What is the danger or downside of using online/cloud web app scanner vs on premise ones?
Sep
5
comment BREACH attack and content length
Isn't BREACH the least of your worries if there is a MITM? I mean, it seems like the requirements in order for this to be effective would leave to you open to much more sinister attacks. What am I missing?
Sep
5
answered what is the cons and pros of using webfiltering based on cloud security?
Sep
5
comment Juggling bus factor & separation of duties on a small team?
It sounds like you're at a crossroads. Are you happy with the status quo or do you want to take the business to the next level? With great risk comes great reward. You've reached a point where you need to spend more money to make more money. If the capital is not on hand you may consider taking on some investors or perhaps a loan. Another option may be to hire interns, or find people willing to accept a job offer based on deferred compensation. I don't envy the decision you have to make one bit, that's tough.
Sep
5
answered Company-issued laptop monitoring
Sep
4
answered mac adress encryption
Sep
4
awarded  Nice Answer
Sep
3
answered Juggling bus factor & separation of duties on a small team?
Aug
26
answered possible implications of disabling Windows Server “administrator” account?
Aug
22
revised How trustable is third party root certificates?
added 27 characters in body
Aug
22
revised How trustable is third party root certificates?
added 85 characters in body
Aug
22
answered How trustable is third party root certificates?
Aug
19
comment Basic Website Protection (XSS,SQL-inject,hashing)
Excellent. I think I read too much between the lines and assumed you were using javascript to validate input.
Aug
19
comment Basic Website Protection (XSS,SQL-inject,hashing)
"Also, is having logic on the client a risk?" Huge risk. Never rely on client side filtering (or trust client side input). It's trivial for a malicious user to bypass.