583 reputation
16
bio website blog.k1DBLITZ.com
location
age
visits member for 1 year, 5 months
seen yesterday

Apr
11
comment Firewall philosophy
@schroeder No sir, I think it is you who are still missing the point. ;) Two scenarios were outlined above where "blindly blocking" at the firewall is key to preventing and controlling unwanted traffic. Only the proxy server should have access out on port 80 and 443 via fw policy. Only the mail server should have access out on port 25 via fw policy. The firewall is key to creating egress points where the respective applications should be filtering out the unwanted and dangerous traffic. I can outline many scenarios where blacklisting leaves a network vulnerable, but there is a character limit.
Apr
10
comment Firewall philosophy
@droope Websense does it out of the box. The traffic is decrypted, inspected, then re-encrypted before passing it back to the user. This effectively thwarts the OP's scenario.
Apr
10
comment Firewall philosophy
@schroeder I disagree. Blocking is key. A fundamental principle of security is operating by least privilege.
Mar
26
comment Why are GPUs so good at cracking passwords?
They are defined as cores: cdn3.wccftech.com/wp-content/uploads/2013/02/… From a pure processing power perspective, the Titan is 14.2 times faster than the current fastest equivalent costing CPU.
Mar
26
answered If an ATM is stolen, how easy can the personal information of the users be recovered?
Mar
26
answered Has my network/computer been breached?
Mar
11
revised Secure single page in a site if site is hacked?
added 227 characters in body
Mar
11
answered Secure single page in a site if site is hacked?
Mar
1
comment Safely generate a non-log file within an application server
You Tom's always provide such knowledgeable answers... and you both use Bear icons. Coincidence or conspiracy? :)
Mar
1
answered Safely generate a non-log file within an application server
Feb
19
comment How can I tell whether this computer is part of a botnet?
Just an FYI, some viruses/trojans/worms will not execute if they detect a virtual host.
Feb
5
answered Safer way to access paypal, Mobile or Pc?
Jan
31
comment Is it possible to list folder from my web server if i have an empty index.html in the root folder?
That is correct. Your friend would have to directly visit Google after accessing your page.
Jan
31
comment Is it possible to list folder from my web server if i have an empty index.html in the root folder?
I recommend password protecting as well because if your friend or anyone you are sharing these files with accesses another website directly after viewing your special page, it will be listed as the referrer in the logs of the destination site. I also have a sneaky suspicion that google crawls referral sites, which means your "secret" link could become indexed by google.
Jan
30
comment How does SSL implement server authentication?
Actually, It's CN (common name) SAN's are the alternate names (aliases if you will) that the certificate will also resolve to.
Jan
28
answered How can I tell whether this computer is part of a botnet?
Jan
25
comment Can SSL requests be proxied by issuing a second certificate?
To elaborate on what Tylerl said, Websense does this. On a corporate network it's a GOOD thing so you can inspect the payload of SSL enabled sites. The CA trust is not an issue as the intermediate and root certs from the corporate CA are pushed to the machines once they join the domain.
Jan
25
comment Connections through Firewalls explained
To add, once the tunnel has been established and as long as it remains open, the server can initiate to the client within that stream.
Jan
24
comment Does the VPN provider know my dedicated IP?
@Joe and to add, any website you hit will log your dedicated IP address assuming you are not connecting through a proxy. Stack Exchange has your dedicated IP address in their logs right now. :P
Jan
22
comment How to spoof an ATM transaction?
It's a line from the movie Hackers...in reference to the reference Polynomial made to Joey.