1,614 reputation
212
bio website
location Tulsa, OK
age
visits member for 2 years, 5 months
seen yesterday

15 years enterprise IT / Infosec experience and counting...


Mar
11
comment proxy servers and restricted work computers
This may or may not work depending upon the OP's employer's VPN solution - at least I haven't had much luck establishing a network level VPN connection inside of a VPN connection.
Mar
10
revised What would you call an attack where authenticated user modifies other users information on web app?
added the actual attack name.
Mar
10
answered What would you call an attack where authenticated user modifies other users information on web app?
Mar
5
comment Is plain text over https really a good idea?
POST payload is not logged in the Webserver logs.
Mar
3
comment List of cookie parameter names to identify load balancing mechanism
A10 loadbalancers use a "sto-id" cookie by default, though the administrator can technically name the cookie whatever they want.
Mar
3
answered Why some routers ask for PIN but can't be cracked using PIN-based attacks?
Feb
4
comment Is there a “security fail forum / website” with lessons learned?
FailyMonster on Twitter reports on these type of incidents. twitter.com/failymonster
Jan
30
comment Check SSLv3 in Apache Tomcat locally as well as on server on windows/linux
Also keep in mind if your webserver is behind a load balancer that is offloading/inspecting/handling SSL traffic it may be vulnerable.
Jan
29
comment Could someone stop another from accessing their own online account?
I think you meant to say, how would Bob defend himself if Alice had a small team. ;) The best way to mitigate this attack if there is a small team willing to enter captchas would be to enable 2 factor authentication for the account. It's actually very easy to configure and use, and would prevent all the scenarios outlined above from being successful.
Jan
28
comment Someone or something tried to login to my Gmail using IP address of my shared hosting
You can also go to myaccount.google.com From there you can review "Devices" under "Recent Activity". Also, check under "Account Permissions" for "Connected apps and services".
Jan
28
answered Could someone stop another from accessing their own online account?
Jan
26
comment SSL mismatch error using ISP-provided IP address but not VPN IP address
Occam's Razor would suggest that Firefox is warning you that autos.yahoo.com is susceptible to POODLE.
Jan
21
comment Security risk with using internal IP on public DNS
It goes against the spirit of RFC 1918. "Indirect references to such addresses should be contained within the enterprise. Prominent examples of such references are DNS Resource Records and other information referring to internal private addresses."
Jan
21
comment Why should I use whitelist on a WAF?
Whitelisting because: "You don't know what you don't know". Think about it.
Jan
13
revised Can I create an SSL certificate on windows signed with the machine's certificate?
added 169 characters in body
Jan
13
comment Can I create an SSL certificate on windows signed with the machine's certificate?
Yes, the key exists on your internal Root Certification Authority server. No, you do not have access to it. (at least you shouldn't) Unfortunately I cannot tell you what your IT department is using that certificate for. As a member of a domain it's common to see a workstation have a certificate for authentication purposes, but that resides in the Personal store, not the Root store. The only reason you would see a non Root certificate in the Root store is to suppress certificate warnings.
Jan
13
answered Can I create an SSL certificate on windows signed with the machine's certificate?
Jan
13
comment How to protect the company VIPs
BeyondTrust makes a product to help with these types of situations. Search for "PowerBroker for Windows: Privilege and Session Management". And no, I don't work for BT.
Jan
6
revised What are the main reason to deploy Secure Web Gateway?
deleted 23 characters in body
Jan
6
answered What are the main reason to deploy Secure Web Gateway?