189 reputation
4
bio website None
location California
age 28
visits member for 3 years, 9 months
seen Dec 9 at 17:17

System Admin with a programming habit.


Nov
27
comment Open source alternatives to tamper data
So, you have reported attacks (from online sites I imagine), and logs of who was using what computer at what time. I think you can spend a LOT of time and effort trying to make a preventative control, or you can spend your time making a tool to quickly identify unique machines in the lab, given a time when an attack took place, and the IP that was hit. You should have the network logs to turn that into a computer, and then a username. And, again, I urge you to consult with legal advice, as trying to do more can be MUCH more trouble than its worth.
Nov
25
answered Open source alternatives to tamper data
Aug
13
answered Replacement for DVL (Damn Vulnerable Linux)?
Aug
13
answered Multi-tenancy and Heartbleed
Aug
13
answered Is it possible to USB whitelist in Linux?
Aug
13
comment What are the biggest security concerns on PXE?
@Pat I'm not blaming PXE at all for this. I'm just saying that since this environment exists, that is a place I can inject myself. These sort of attacks are usually possible with other network-based provisioning systems, as long as I can adequately spoof enough of a corporate system to allow me to download the image.
Aug
13
comment What are the biggest security concerns on PXE?
1st off: If I can get physical access in the environment, I can plug something between the computer and the switch that can manipulate traffic. Therefore, that device would just need to capture and not re-propigate broadcasts. No race condition necessary.
Aug
12
answered What are the biggest security concerns on PXE?
Aug
12
awarded  Supporter
Jan
15
answered How to store user credentials like Mint.com
May
21
awarded  Teacher
May
20
answered Could an Encrypted VG/Image compromised?
Mar
14
awarded  Citizen Patrol
Mar
10
awarded  Autobiographer