1,574 reputation
212
bio website
location Tulsa, OK
age
visits member for 2 years, 5 months
seen 10 hours ago

15 years enterprise IT / Infosec experience and counting...


Jan
28
answered Could someone stop another from accessing their own online account?
Jan
26
comment SSL mismatch error using ISP-provided IP address but not VPN IP address
Occam's Razor would suggest that Firefox is warning you that autos.yahoo.com is susceptible to POODLE.
Jan
21
comment Security risk with using internal IP on public DNS
It goes against the spirit of RFC 1918. "Indirect references to such addresses should be contained within the enterprise. Prominent examples of such references are DNS Resource Records and other information referring to internal private addresses."
Jan
21
comment Why should I use whitelist on a WAF?
Whitelisting because: "You don't know what you don't know". Think about it.
Jan
13
revised Can I create an SSL certificate on windows signed with the machine's certificate?
added 169 characters in body
Jan
13
comment Can I create an SSL certificate on windows signed with the machine's certificate?
Yes, the key exists on your internal Root Certification Authority server. No, you do not have access to it. (at least you shouldn't) Unfortunately I cannot tell you what your IT department is using that certificate for. As a member of a domain it's common to see a workstation have a certificate for authentication purposes, but that resides in the Personal store, not the Root store. The only reason you would see a non Root certificate in the Root store is to suppress certificate warnings.
Jan
13
answered Can I create an SSL certificate on windows signed with the machine's certificate?
Jan
13
comment How to protect the company VIPs
BeyondTrust makes a product to help with these types of situations. Search for "PowerBroker for Windows: Privilege and Session Management". And no, I don't work for BT.
Jan
6
revised What are the main reason to deploy Secure Web Gateway?
deleted 23 characters in body
Jan
6
answered What are the main reason to deploy Secure Web Gateway?
Dec
29
comment How does infection through web surfing work?
^^^ That is still entirely possible. Once can be compromised merely by visiting a malicious site depending upon the exploit being leveraged.
Dec
24
comment Best practices to copy private keys to mobile devices
Which phone manufacturer?
Dec
19
comment Web server interaction with a database server
I think you may have misunderstood, or perhaps I am not following you. The DMZ is not dual-homed to the public internet and internal network. There are two separate DMZs - A WebDMZ and an AppDMZ. There is no access from the internet directly to the AppDMZ or internal network.
Dec
19
revised Connecting trusted and untrusted networks
added 113 characters in body
Dec
19
answered Web server interaction with a database server
Dec
19
answered Connecting trusted and untrusted networks
Dec
18
comment Multi Domain SSL for different ip?
For future reference, SSL certificates are not tied to IP address, per se. They are tied to the CN or Common Name assigned in the certificate. As long as the target host resolves to the CN you're good.
Dec
18
comment Protect against clickjacking but allow framing on domain?
Any reason why you wouldn't/can't just use the ALLOW-FROM option? From what I've read, current versions IE and Mozilla both support it. Chrome is unconfirmed at this point.
Dec
17
comment Which all ports are in danger and needs to be closed with immediate attention?
Is there a (poorly configured) firewall in front of this webserver?
Dec
16
comment Do website owners know what keywords a visitor typed in google search to get to their site?
Yes, they do. I can tell you for a fact that google webmaster tools displays search queries that lead users to your website.