meta user
network profile
| bio | website | blog.k1DBLITZ.com |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 6 months |
| seen | yesterday | |
| stats | profile views | 18 |
|
May 14 |
comment |
Somehow unexpectedly my computer got infected with malware @roxyfm - I recommend Qualys Browser Check to make sure your plugins/extensions aren't leaving you vulnerable. I would also run Secunia PSI and make sure all your programs are up to date. If you really want to take it to the next level, download the community versions of RetinaCS by BeyondTrust or Nexpose by Rapid7. |
|
Apr 26 |
comment |
Is it safe to allow users multiple login at different browsers & computers? Keep in mind that gmail also tracks these logins and the user can view this history at any time, which includes Access Type, Location (IP address) and Date/Time stamps. The user also has the ability to sign out all other sessions. The user has the option to be alerted when unusual login activity is occurring. Does your application provide this functionality? Because if not, than they can't use gmail as an example to justify multiple multiple logins. |
|
Apr 15 |
comment |
For TLS how to instruct IIS 7 to include Intermediate CAs to be included in the Certificate Request frame? Odd, from my experiences if the client has the proper chain then you're good to go. Is the java client on a windows machine or unix machine? Java doesn't take advantage of the windows key/certificate store, it has its own. I'm assuming the java client is connecting via and can resolve the CN on the certificate issued to the web service, yes? |
|
Apr 15 |
comment |
get vs post which is more secure? In supplement to your answer, here is a nice table that outlines the differences between both: diffen.com/difference/Get_vs_Post |
|
Apr 15 |
comment |
Why are hash functions one way? If I know the algorithm, why can't I calculate the input from it? Best TL;DR quote ever. I think I need to create a new stack in my evernote just for your answers. Do you author any articles or books by chance? |
|
Apr 15 |
comment |
For TLS how to instruct IIS 7 to include Intermediate CAs to be included in the Certificate Request frame? Is updating the java certificate store of the java client with the proper intermediate/root certificate out of the question? |
|
Apr 12 |
comment |
Firewall philosophy Nope, it doesn't. Pretty neat how it works. Websense integrates with your corporate internal Certificate Authority to generate certificates on the fly for SSL enabled domains. Since your browser will trust the certs issued from your own CA and the common name matches the connection is trusted. If you view the cert path when connecting via SSL you will see it resolves to your internal CA's root. Also keep in mind that browsers are bound to a different protocol specification when communicating with proxies. |
|
Apr 12 |
comment |
Firewall philosophy @schroder /facepalm It appears we shall agree to disagree. |
|
Apr 11 |
comment |
Firewall philosophy @schroeder No sir, I think it is you who are still missing the point. ;) Two scenarios were outlined above where "blindly blocking" at the firewall is key to preventing and controlling unwanted traffic. Only the proxy server should have access out on port 80 and 443 via fw policy. Only the mail server should have access out on port 25 via fw policy. The firewall is key to creating egress points where the respective applications should be filtering out the unwanted and dangerous traffic. I can outline many scenarios where blacklisting leaves a network vulnerable, but there is a character limit. |
|
Apr 10 |
comment |
Firewall philosophy @droope Websense does it out of the box. The traffic is decrypted, inspected, then re-encrypted before passing it back to the user. This effectively thwarts the OP's scenario. |
|
Apr 10 |
comment |
Firewall philosophy @schroeder I disagree. Blocking is key. A fundamental principle of security is operating by least privilege. |
|
Mar 26 |
comment |
Why are GPUs so good at cracking passwords? They are defined as cores: cdn3.wccftech.com/wp-content/uploads/2013/02/… From a pure processing power perspective, the Titan is 14.2 times faster than the current fastest equivalent costing CPU. |
|
Mar 1 |
comment |
Safely generate a non-log file within an application server You Tom's always provide such knowledgeable answers... and you both use Bear icons. Coincidence or conspiracy? :) |
|
Feb 19 |
comment |
How can I tell whether this computer is part of a botnet? Just an FYI, some viruses/trojans/worms will not execute if they detect a virtual host. |
|
Jan 31 |
comment |
Is it possible to list folder from my web server if i have an empty index.html in the root folder? That is correct. Your friend would have to directly visit Google after accessing your page. |
|
Jan 31 |
comment |
Is it possible to list folder from my web server if i have an empty index.html in the root folder? I recommend password protecting as well because if your friend or anyone you are sharing these files with accesses another website directly after viewing your special page, it will be listed as the referrer in the logs of the destination site. I also have a sneaky suspicion that google crawls referral sites, which means your "secret" link could become indexed by google. |
|
Jan 30 |
comment |
How does SSL implement server authentication Actually, It's CN (common name) SAN's are the alternate names (aliases if you will) that the certificate will also resolve to. |
|
Jan 25 |
comment |
Can SSL requests be proxied by issuing a second certificate? To elaborate on what Tylerl said, Websense does this. On a corporate network it's a GOOD thing so you can inspect the payload of SSL enabled sites. The CA trust is not an issue as the intermediate and root certs from the corporate CA are pushed to the machines once they join the domain. |
|
Jan 25 |
comment |
Connections through Firewalls explained To add, once the tunnel has been established and as long as it remains open, the server can initiate to the client within that stream. |
|
Jan 24 |
comment |
Does the VPN provider know my dedicated IP? @Joe and to add, any website you hit will log your dedicated IP address assuming you are not connecting through a proxy. Stack Exchange has your dedicated IP address in their logs right now. :P |
