147 reputation
8
bio website
location NYC
age
visits member for 1 year, 7 months
seen Mar 29 at 12:51

Apr
3
comment opening up Active directory to cloud services?
Unfortunately, it is a separate set of permissions which protect the Active Directory objects themselves. I found this article (stackoverflow.com/questions/823184/…) which may give you a way forward.
Apr
3
revised What does this injected code do?
This is related to Malware
Apr
3
answered opening up Active directory to cloud services?
Apr
3
suggested suggested edit on What does this injected code do?
Mar
28
answered Inspecting “tidynetwork” element in chrome to find its origin on my laptop
Mar
25
awarded  Commentator
Mar
25
comment How to bypass Nmap blockage?
Ping or ICMP is a different protocol than TCP. It is entirely possible that they are using egress filtering to restrict outbound TCP traffic while allowing ICMP.
Mar
25
revised Has my network/computer been breached?
This is likely related to the malware tag.
Mar
25
suggested suggested edit on Has my network/computer been breached?
Mar
25
comment How to bypass Nmap blockage?
Sounds like they may have implemented Egress Filtering.
Mar
20
comment What type of PCI Compliance do I need if I don't hold any card data
The answer to this question depends on what function you are going to perform for this company. Also, how will you be receiving their data? Will you have access to their card holder environment?
Mar
14
comment Is the aggregate severity rating of “Important” for MS13-027 too low?
I wish I could "accept" two answers. Your point about risk assessment in the context of the organization is spot on.
Mar
14
accepted Is the aggregate severity rating of “Important” for MS13-027 too low?
Mar
14
awarded  Scholar
Mar
14
revised Is the aggregate severity rating of “Important” for MS13-027 too low?
added 159 characters in body
Mar
14
comment Is the aggregate severity rating of “Important” for MS13-027 too low?
Per the SRD blog post "This update represents an expansion of our risk assessment methodology to recognize vulnerabilities that may require physical access, but do not require a valid logon session". Physical environment is now in scope for Microsoft advisories. I think @AJHenderson answered the question best.
Mar
13
comment Is the aggregate severity rating of “Important” for MS13-027 too low?
Interesting perspective. I hadn't considered the difficulty in what it would take to create malware to install a software device configured to appear as a USB host.
Mar
13
awarded  Student
Mar
13
awarded  Citizen Patrol
Mar
13
comment Is the aggregate severity rating of “Important” for MS13-027 too low?
In the SRD blog post they mention that you do not necessarily need local access. Per the blog post "Other software that enables low-level pass-through of USB device enumeration may open additional avenues of exploitation that do not require direct physical access to the system". I interpret that to mean that a malicious executable could crafted to exploit this. So a logged in user must click on something to be owned, or someone would need physical access to own a machine with no one logged in.