1,282 reputation
210
bio website k1DBLITZ.com
location
age
visits member for 2 years
seen yesterday

15 years enterprise IT / Infosec experience and counting...


1d
comment What happens if a page with an invalid SSL cert responds with a 302 redirect to a page with a valid cert? Do you still get the warning?
This is a common problem that can occur if a site is hosted entirely in SSL. Buying an SSL certificate with a SAN (subject alternative name) will get around this problem. Entrust offers one SAN "free" with each of their certificates. Not sure about the other vendors.
2d
comment “Diffie-Hellman Key Exchange” in plain English
In the case of an HTTPS connection, authentication is handled by the SSL certificate framework. You can be certain (as you can be) that you are communicating with the intended parties through verification and trust. The handshake/negotiation of an SSL connection is expensive in terms of overhead. The DH algorithm allows both parties to securely negotiate a symmetric key for encryption/decryption which is much more efficient.
Nov
24
comment Can a botnet be used to effectively break encryption keys?
Fun Fact: the Titan supercomputer employs 18,688 NVIDIA Tesla K20 GPUs in conjunction with CPUs. I wonder if the 'secure' assumption included the exponentially superior performance of GPUs when performing such operations?
Nov
3
comment How do I block a blogspot site using hosts file?
Are you on a network that is using a proxy server?
Oct
30
comment Can anyone be hacked?
Wow...dude... you went off the deep end. :) Schroeder's response is obviously coming from a real world corporate background - at least that's what I'm seeing in his response.
Sep
30
comment Internal IP addresses allowed access to all DMZ hosts
Correct. In my opinion, the chance of a workstation being compromised by an outside attacker is exponentially higher than a server being compromised by an outside attacker. Workstations are operated by users who have a propensity to click things, have some form of direct internet access, and tend to use highly vulnerable programs like Flash or AdobePDFs. That attack surface of a workstation is greater than that of a server. This means the internal workstations cannot be assumed trusted from a DMZ point of view and should not have unrestricted / unfiltered access to DMZ assets.
Sep
26
comment Someone used my router to set up their own network
"The router only "broadcasts" a single network". That's not true. Many routers have a guest network, a 2.4ghz network, and a 5ghz network. All can have separate SSIDs.
Sep
23
comment SSL Certificate and IDS\IPS
A general diagram would be helpful. How is it that you don't have access to "an internal web server in our perimeter DMZ"? Why do you need to be routed to a third party to access a host already on your own network?
Sep
23
comment Does encrypting a setting in web.config actually provide security?
The last part Xander mentions in his reply is important. Not all exploits allow an attacker to take complete control of the system. Some exploits allow the attacker to download or access files that they shouldn't normally be able to access, like the web.config.
Sep
22
comment Pentesting an ATM OS upgraded from Windows XP to Windows 7
Just an FYI, there is no upgrade path from WindowsXP to Windows7. Meaning, if they went from WindowsXP to Windows7 it's essentially a fresh installation of Windows7.
Sep
22
comment Is there any danger in allowing users to host PDF/RTF/DOC files on my web server?
In reference to abacabadabacaba's comment, review this video: vimeo.com/103938583 A simple jpg upload functionality contributed to an internal domain controller being compromised.
Sep
22
comment Can a system administrator see if someone is using a VPN?
"OK... I'm really asking for a friend tho :P" That's what THEY always say too. ;P
Sep
18
comment Does a separate internet connection increase security for remote users?
"I, myself, have made the same request to a certain remote employee to ensure separation of use within that employee's home." How does this ensure separation? What prevents another user in the home from using this same separate connection? What prevents the user from connecting other devices to this same separate connection? Unless you're also deploying a corporate owned and controlled router at the end point, you haven't really ensured anything except that the employee now has a higher monthly internet bill.
Sep
9
comment How to check whether firewall allows traffic on specific port but not listening on the port
If it's available, use Telnet.
Sep
9
comment What kind of factor is a physical signature?
..I don't know about you guys, but I can't even reproduce my OWN signature identically every time. :D
Sep
5
comment Can eavesdropping be facilitated by injecting content that will be transmitted?
Is the card data at Bank A encrypted at rest?
Sep
5
comment BREACH attack and content length
Isn't BREACH the least of your worries if there is a MITM? I mean, it seems like the requirements in order for this to be effective would leave to you open to much more sinister attacks. What am I missing?
Sep
5
comment Juggling bus factor & separation of duties on a small team?
It sounds like you're at a crossroads. Are you happy with the status quo or do you want to take the business to the next level? With great risk comes great reward. You've reached a point where you need to spend more money to make more money. If the capital is not on hand you may consider taking on some investors or perhaps a loan. Another option may be to hire interns, or find people willing to accept a job offer based on deferred compensation. I don't envy the decision you have to make one bit, that's tough.
Aug
19
comment Basic Website Protection (XSS,SQL-inject,hashing)
Excellent. I think I read too much between the lines and assumed you were using javascript to validate input.
Aug
19
comment Basic Website Protection (XSS,SQL-inject,hashing)
"Also, is having logic on the client a risk?" Huge risk. Never rely on client side filtering (or trust client side input). It's trivial for a malicious user to bypass.