902 reputation
210
bio website security.stackexchange.com
location United States
age 34
visits member for 1 year, 11 months
seen Oct 16 at 1:33

I'm a programmer that does some security work. I went to school for security stuff and have a stack of certifications. I hope to be a useful contributor to the community.


Feb
5
awarded  Enlightened
Feb
5
awarded  Nice Answer
Nov
21
awarded  Yearling
Jul
11
answered SSL/TLS - Distinction between self-signed cert and self-signed CA, and other questions?
Jun
15
answered Is there any way to get Chrome 27 to trust a self-signed cert?
May
3
comment What is the difference between a Gateway and a Firewall?
This type of question can be easily answered with a simple web search. As you continue to learn more about security it will help to be proactive about searching out for the answers yourself. In addition to being faster you'll also gain more domain knowledge as you expose yourself to more technical detail, rather than only getting 'pre-chewed' information. Best of luck in your endeavors.
Apr
25
revised Security difference in wardriving open network versus monitoring traffic on a network to which I am authenticated
added 21 characters in body
Apr
21
answered Security difference in wardriving open network versus monitoring traffic on a network to which I am authenticated
Apr
17
comment Bypassing Web Application input validation
Maybe, but not in practice. shrugs Firewalls that look for this type of stuff generally look at it two ways; known encoding schemes and statistical algorithm analysis. Everything is everything 'in theory', that doesn't make it a good idea to try and identify it all. IMO.
Apr
16
answered Bypassing Web Application input validation
Apr
16
comment Sharing Nmap scan results in a web page
fair enough :-)
Apr
16
revised Sharing Nmap scan results in a web page
added info
Apr
16
comment Sharing Nmap scan results in a web page
I guess you could use some of the msframework utilities to present nmap logs but isn't that kind of like swatting a fly with a howitzer?
Apr
16
answered Sharing Nmap scan results in a web page
Apr
5
comment What does this injected code do?
@D3C4FF: ups for a great response.
Mar
21
comment How do cellphones discover wireless APs?
The phone will initiate the connection utilizing information contained in the beacon frame OR that is pre configured in the device. For example, you might have a private AP that isn't broadcasting. Your phone could still connect to that AP if you know certain information, such as the ESSID. Once the device(phone) negotiates a connection to the AP it is connected to that network and 'normal' networking protocols take over. The device does initiate the connection, but the AP is identified (re: your question) through a beacon frame or direct specification.
Mar
21
answered How do cellphones discover wireless APs?
Mar
12
comment Should I use SSL on my database server?
I would say yes. Remember that your web server is on a public facing network and it is going to be broadcasting back to your DB in one fashion or another. I also suspect that your database does have a public facing aspect since you're getting to it from your web server, but I don't know how rackspace sets up their kit. It's possibly worth looking into how your services are structured but yes, I'd still recommend using SSL/TLS.
Mar
12
answered Should I use SSL on my database server?
Mar
10
answered What dangerous characters need to be filtered from user input prior to use in a DB2 SQL query?