1,389 reputation
211
bio website k1DBLITZ.com
location Tulsa, OK
age
visits member for 2 years, 1 month
seen 3 hours ago

15 years enterprise IT / Infosec experience and counting...

Professional Kickboxer/Boxer and avid PC gamer. (weird combination, I know)


Dec
5
comment What do I do when an ATM freezes
Sounds like some wal-mart employee just conned you out of $800.
Dec
3
revised Do firewall rules have to be symmetric? That is, does a firewall have to block a particular traffic type both inbound and outbound
added 4 characters in body
Dec
3
answered Do firewall rules have to be symmetric? That is, does a firewall have to block a particular traffic type both inbound and outbound
Dec
2
awarded  Student
Dec
2
asked Can I force unique passwords for domain admin accounts?
Nov
28
answered W3af and automated vulnerability scanners vs manual testing
Nov
28
comment How do you explain to experts that a database server should not reside in the DMZ?
For more information on this topic in the future (in case you need more ammo) the term is "N Tiered Architecture". (for google searches)
Nov
27
comment What happens if a page with an invalid SSL cert responds with a 302 redirect to a page with a valid cert? Do you still get the warning?
This is a common problem that can occur if a site is hosted entirely in SSL. Buying an SSL certificate with a SAN (subject alternative name) will get around this problem. Entrust offers one SAN "free" with each of their certificates. Not sure about the other vendors.
Nov
25
comment “Diffie-Hellman Key Exchange” in plain English
In the case of an HTTPS connection, authentication is handled by the SSL certificate framework. You can be certain (as you can be) that you are communicating with the intended parties through verification and trust. The handshake/negotiation of an SSL connection is expensive in terms of overhead. The DH algorithm allows both parties to securely negotiate a symmetric key for encryption/decryption which is much more efficient.
Nov
24
comment Can a botnet be used to effectively break encryption keys?
Fun Fact: the Titan supercomputer employs 18,688 NVIDIA Tesla K20 GPUs in conjunction with CPUs. I wonder if the 'secure' assumption included the exponentially superior performance of GPUs when performing such operations?
Nov
1
awarded  Yearling
Oct
31
revised Can anyone be hacked?
formatting.
Oct
30
answered Where to place a vulnerability scanner within a data center
Oct
30
answered Can anyone be hacked?
Oct
30
comment Can anyone be hacked?
Wow...dude... you went off the deep end. :) Schroeder's response is obviously coming from a real world corporate background - at least that's what I'm seeing in his response.
Oct
23
answered How can I verify that SSLv3 protocol is disabled?
Oct
16
revised Web Application Vulnerability Scan- False Positives-Recognizing and Eliminating
added 1 character in body
Oct
15
answered Web Application Vulnerability Scan- False Positives-Recognizing and Eliminating
Oct
8
answered Is TCP more secure than UDP?
Sep
30
comment Internal IP addresses allowed access to all DMZ hosts
Correct. In my opinion, the chance of a workstation being compromised by an outside attacker is exponentially higher than a server being compromised by an outside attacker. Workstations are operated by users who have a propensity to click things, have some form of direct internet access, and tend to use highly vulnerable programs like Flash or AdobePDFs. That attack surface of a workstation is greater than that of a server. This means the internal workstations cannot be assumed trusted from a DMZ point of view and should not have unrestricted / unfiltered access to DMZ assets.