496 reputation
8
bio website ca.linkedin.com/in/…
location Oshawa, Canada
age 37
visits member for 11 months
seen Mar 27 at 20:12

Senior Network Analyst at Town of Whitby, Ontario, Canada

combined Stack Exchange profile for Rod MacPherson


Dec
13
comment Helpdesk role and local admins
If you absolutely need to have "power users" log into their machines as local admins then why can you not add the helpdesk-localadmin group to the local admin list too?
Dec
9
comment Installed new Wildcard certificates on my server, but still appear as expired on browser
I didn't think so, certificates don't usually cache like that, I was going to suggest that there may be another process (like the node.js that you found) serving up pages with the other cert.
Dec
9
comment Installed new Wildcard certificates on my server, but still appear as expired on browser
Does the certificate fingerprint you see in the browser match the old certificate or the new one? or some other version?
Dec
9
comment What security products are necessary or advised for a home computer running Windows?
I do think that my previous answer was OK, as there is only one product I know of that fits this description, but I will avoid mentioning the name so I don't get my comment deleted again. There are protections such as DEP, SEHOP, and ASLR. Normally these have to be implemented at a programming level, but a certain program is available that will sit between the OS and any other program you want it to and watch for attempted buffer overflows, etc. It runs beside AV & when applied to internet facing programs like IE, Adobe Reader, Chrome, Windows Media Player... will help block even 0 Days.
Nov
28
comment PCI Compliance Distibution
Please check your terminology. Breaches are break-ins. Vulnerabilities are ways to break in. Trustwave reported several vulnerabilities, not breaches... unless you went beyond the Trustwave ASV scans and hired them to come in and do forensics.
Nov
1
answered How serious is InstallIQ?
Oct
24
comment Is there any point to keeping a “Verified by X” image on the page for a page secured by SSL?
I recall dealing with a vendor of some hosted service or another last year who had a new web based service that they were trying to sell us and the site had one of those logos but it was http:// and a wireshark capture using the site showed that no part of it, not even the login process went over https:// We talked to them about it and they insisted it was secure. They had not even set up their server to use SSL/TLS as an option, but they fully believed that because they bought a certificate and pasted the logo code onto the site it was secure.
Oct
3
comment How force that all connections to my Apache use TLSv1.1 or TLSv1.2?
What are your SSLCipherSuite settings?
Oct
3
answered How can a non-technical user verify a message was sent “securely”? …or over TLS?
Sep
25
comment Hotspot with same SSID, how does authorization work?
@TerryChia Just trying to make it easy to understand and interesting to read. Tom already tried a technical answer.
Sep
24
comment Hotspot with same SSID, how does authorization work?
Witha malicious AP trying to spoof the exchange would look like this .... AP: "here's my ID" PC: "That's so fake!" rolls eyes and walks away. :)
Sep
24
comment Hotspot with same SSID, how does authorization work?
Your Laptop won't send the credentials to an access point using PEAP if it has not yet verified that it is the correct AP by checking the certificate that the AP sends to it. The exchange should go like this (roughly): AP: "Hi everyone, I'm the university AP" PC: "Hi AP, I'm a laptop that belongs on your network" AP: "Cool PC, we're still using PEAP, so here is my ID" PC: " yup, looks good to me, my user is JochemKuijpers" AP: "what's his password?" PC: "sdfsjkafsk" AP: after whispering to a server behind him "That checks out, come on in"
Sep
19
answered Two-Step vs. Two-Factor Authentication - Is there a difference?
Sep
13
answered Why block outgoing network traffic with a firewall?
Sep
5
answered Why should I log successful log-ins to my server?
Aug
29
answered Should a full disk encrypted hard drive on a live system be considered encryption at rest?
Aug
29
comment how much of a security threat would this be?
I'm with Hennes on this one, why are non-administrators allowed to log into the DC anyway? ...especially, why would they be allowed to log in remotely? I cannot think of a case where this is needed.
Aug
27
comment Is Encrpyting Home Sufficient?
That depends on what you are trying to protect. /etc has all of the configuration for your software, the list of users, and the users' encrypted passwords. /var has all of the logs. /var/spool/mail has mail spools if your machine has a mail server, which most linux installs do by default, even if it is only used by the system for notifications to the root user. /var/spool/print is the print spool things you tried to print when the printer wasn't available can end up there. /tmp and /var/tmp can hold all kinds of temporary files. By far the easiest thing to do is full disk encryption.
Aug
27
revised Is Encrpyting Home Sufficient?
added 98 characters in body
Aug
27
answered Is Encrpyting Home Sufficient?