meta user
network profile
| bio | website | blog.k1DBLITZ.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 6 months |
| seen | May 15 at 20:33 | |
| stats | profile views | 17 |
|
Dec 10 |
comment |
Is WordPress a security vulnerability inside a corporate intranet? Are you referring to an internet or intranet hosted version of wordpress? |
|
Dec 10 |
comment |
IIS 6.0 - mitigating BEAST Are there any load balancers/proxies/application firewalls in front of your web servers? Could explain why you still seeing AES-256SHA even if you have it disabled on the web server. |
|
Nov 29 |
comment |
System time and certificates Just a note, SSL certificates continue to encrypt data even after the expiration date. |
|
Nov 29 |
awarded | Commentator |
|
Nov 29 |
comment |
How can I limit the consequences of a possible future identity theft? In addition, I recommend creating a gmail account that is used ONLY with financial websites and enabling two factor authentication for that gmail account. |
|
Nov 19 |
comment |
How can I keep my programmer collegues informed about security issues? owasp.org is a good resource. |
|
Nov 14 |
answered | Monitoring for security threats |
|
Nov 6 |
comment |
Attacking an office printer? Also be aware that most printers/copiers/scanner these days store images of what was printed/copied/scanned within printer memory. And since your printer is accessible outside of your network.... I'm sure you can see where this is going. |
|
Nov 5 |
comment |
Potential consequences of using “Everyone” to manage permissions? First you must determine which method the user is utilizing to authenticate. This will help: technet.microsoft.com/en-us/library/cc733010(v=ws.10).aspx If it's an internal application than you will typically want to use NTLM or Kerberos authentication (in which case the users authenticate as themselves) and grant NTFS permission to the webroot according. For an internet facing application you will typically utilize Anonymous authentication in which place the default IUSR account is who the users will masquerade as. |
|
Nov 5 |
comment |
Are SSL encrypted requests vulnerable to Replay Attacks? Did you actually read the other post? The scenario referenced a proxy server that someone had control over, aka, man in the middle. |
|
Nov 5 |
comment |
Are SSL encrypted requests vulnerable to Replay Attacks? I thought it was pretty obvious. I was informing "us" don't make the assumption that SSL cannot be decrypted by a man in the middle. |
|
Nov 5 |
answered | Potential consequences of using “Everyone” to manage permissions? |
|
Nov 5 |
comment |
Are SSL encrypted requests vulnerable to Replay Attacks? Based on the question you posted here, security.stackexchange.com/questions/23607/… that was flagged as a duplicate - just wanted to point out that it is possible for a man in the middle utilizing a proxy to decrypt the packets. |
|
Nov 2 |
comment |
Is there a need for SSL on a local site? You also need to take into account any the data this application will house and what regulations such as HIPAA, SOX, GLBA, PCI, etc state are the requirements for said data. Of course this is all dependent upon your businesses industry. |
|
Nov 2 |
awarded | Supporter |
|
Nov 2 |
awarded | Editor |
|
Nov 2 |
revised |
How to block or detect user setting up their own personal wifi AP in our LAN? grammar |
|
Nov 2 |
answered | How to block or detect user setting up their own personal wifi AP in our LAN? |
|
Nov 1 |
awarded | Teacher |
|
Nov 1 |
answered | Whats the best IT Security Web Forum? |
