meta user
network profile
| bio | website | |
|---|---|---|
| location | United Kingdom | |
| age | ||
| visits | member for | 3 months |
| seen | 1 hour ago | |
| stats | profile views | 36 |
I am not good at anything, just better than I was before.
|
Mar 7 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field true, however what about people logging into their Windows Domain from a laptop? We collect these logs too. |
|
Mar 7 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field +1 for posing the question to me as to whether we really need to know the username or not. I tend to think that we still need to username in the logs, but could be convinced otherwise should the arguments be strong enough. One of the reasons is to use correlation engine to put together time, frequency, source and destination IPs with the username. As I said, still don't have a very conclusive opinion about it, but thanks for the thought: it put me to think even more about it.@KevinReid |
|
Mar 7 |
awarded | Great Question |
|
Mar 6 |
awarded | Mortarboard |
|
Mar 6 |
awarded | Notable Question |
|
Mar 5 |
awarded | Popular Question |
|
Mar 5 |
awarded | Good Question |
|
Mar 5 |
awarded | Nice Question |
|
Mar 5 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field at First sight this looks pretty elegant. Thank you @MattBorja |
|
Mar 5 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field Excellent suggestion. I think the majority of answers here so far put a good summary and it all makes a lot sense. +1 |
|
Mar 5 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field Indeed. If we try and combine this with some basic level filter as suggested by @CodesInChaos. +1 |
|
Mar 5 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field @CodesInChaos that's an interesting idea and I am sure it is possible to implement a regex filter for this. |
|
Mar 5 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field @asadz I agree with you 100% |
|
Mar 5 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field @asadz the threat seems pretty big to me, since the password might be transmitted in clear text from the username filed as if it were the username. The likelihood might be minimal, however the likelihood of internal fraud from someone abusing the log viewing privileges of the clear-text stored password that scares me the most. |
|
Mar 5 |
revised |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field added 50 characters in body |
|
Mar 5 |
comment |
Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field Indeed. that would solve half of my problems/concerns. +1. Thanks very much. |
|
Mar 5 |
asked | Passwords Being Sent in Clear Text Due to Users' Mistake in Typing it in the Username Field |
|
Mar 4 |
comment |
PHP attack string in access logs What an answer: +1, no doubt! |
|
Feb 28 |
comment |
What does working in cybersecurity look like? You are welcome. From my team, not a single person has a Masters. In fact, I don't know where you are, but in UK they have Honours as well, which is another year after graduation. I did not bother doing it as I found it condescending and unnecessary. I believe Masters and PhD are mainly applicable for non-technology areas like psychology, Classics, History, etc. In those cases, Academic path is really necessary. IT Security need people that can do the job, at least this has been my experience. |
|
Feb 28 |
revised |
What does working in cybersecurity look like? added 13 characters in body |
