meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 5 months |
| seen | 2 hours ago | |
| stats | profile views | 34 |
|
2h |
comment |
Best source(s) for security related news? Man, some of those haven't been updated in years. Thanks for the dump though. |
|
1d |
comment |
Becoming a malware analyst? You seem pretty smart. I'd hit up CMU if I were you. They have a group of people who do that stuff. They're really good (Check out the historical rankings). |
|
1d |
revised |
Force clients to use proxy added 542 characters in body |
|
1d |
answered | Force clients to use proxy |
|
1d |
comment |
Why can we not block DNS Amplification attack by blocking UDP packets or DNS response packet? What I am saying is that cloudflare and akamai are specifically designed with huge pipes to the Internet, capable of actually passing well over 300gbps easily. Unless you design your network in the same way (infeasible), you will not be successful. The reason their filters work is because they also have pipes big enough to handle it in the first place, thereby absorbing the attack and not passing it on to you. |
|
1d |
comment |
cant connect to network after spoofing mac Perhaps they have something like "mac-address sticky" enabled? Many possibilities... |
|
1d |
comment |
Why can we not block DNS Amplification attack by blocking UDP packets or DNS response packet? "Very easy to prevent" is relative. If you set up your edge routers to filter UDP packets, and get hit by 300+ gbps, you are going down unless you have a service like cloudflare or akamai. |
|
May 7 |
answered | How do WPA/WPA2 cracking programs know when the PMK/PTK is correct? |
|
May 1 |
comment |
How does Google Authenticator work? The codes are not "sent". They are made via a seed and counter. |
|
Apr 3 |
comment |
Man-in-the-middle scenario for TLS Wow, very cool historical context. +1 |
|
Mar 25 |
awarded | Scholar |
|
Mar 25 |
accepted | Why is ECC more vulnerable than RSA in a post-quantum world? |
|
Mar 22 |
awarded | Student |
|
Mar 22 |
asked | Why is ECC more vulnerable than RSA in a post-quantum world? |
|
Mar 13 |
comment |
Does it make any difference of the order Hashing and Encrypting in terms of security? I don't really know for sure, but I would posit that you should encrypt first then hash. This is because your result will be a hash, and you will need to brute force the hash (Hard because of large input), then break the key. Conversely, if you hash first, then encrypt, it will be much easier to break the encryption because the input string is so small. |
|
Mar 3 |
comment |
What does working in cybersecurity look like? Uh, kind of but not really. I don't mean do this in a home lab; I mean legitimately doing it as a job. |
|
Mar 1 |
comment |
What does working in cybersecurity look like? Really any type of admin. Wintel, Linux, web, network, whatever. Just having that real-world hands-on multi-year (Wow that's a lot of hyphens) experience brings the security world into perspective. Otherwise it's hard to fully understand the challenges most teams go through regarding security. |
|
Feb 28 |
comment |
What does working in cybersecurity look like? There are plenty of jobs in the field; public, private, government, etc. What I have found is that most good security engineers have a background as an admin. I know plenty of people who went straight into security, and although they have a great theoretical background, they typically don't "get it." Also, to address degrees - although they do help, it's not always worth to get the MS or PHD if you're going to work for a business as a security guy. That's mostly for the academics or research people. |
|
Feb 25 |
comment |
Why do we not trust an SSL certificate that expired recently? Just my 2c... If you are a big enough customer, you can get "normal" (Non-EV, etc.) VeriSign certs for <$100/yr as well. Verisign Internal certs are even cheaper, at about 1/4th the price. |
|
Feb 14 |
comment |
How does OCSP stapling work? I read this today and it reminded me of this. For those who aren't familiar, the CA Security Council is a new conglomerate of CAs... Check it out. casecurity.org/2013/02/14/… |
