189 reputation
4
bio website None
location California
age 28
visits member for 3 years, 9 months
seen Dec 9 at 17:17

System Admin with a programming habit.


Nov
27
comment Open source alternatives to tamper data
So, you have reported attacks (from online sites I imagine), and logs of who was using what computer at what time. I think you can spend a LOT of time and effort trying to make a preventative control, or you can spend your time making a tool to quickly identify unique machines in the lab, given a time when an attack took place, and the IP that was hit. You should have the network logs to turn that into a computer, and then a username. And, again, I urge you to consult with legal advice, as trying to do more can be MUCH more trouble than its worth.
Aug
13
comment What are the biggest security concerns on PXE?
@Pat I'm not blaming PXE at all for this. I'm just saying that since this environment exists, that is a place I can inject myself. These sort of attacks are usually possible with other network-based provisioning systems, as long as I can adequately spoof enough of a corporate system to allow me to download the image.
Aug
13
comment What are the biggest security concerns on PXE?
1st off: If I can get physical access in the environment, I can plug something between the computer and the switch that can manipulate traffic. Therefore, that device would just need to capture and not re-propigate broadcasts. No race condition necessary.