510 reputation
1520
bio website slashdot.org
location Oklahoma City, OK
age 28
visits member for 3 years, 5 months
seen 22 hours ago

Security Analyst


Nov
7
comment Wireless client isolation - how does it work, and can it be bypassed?
You're going about this all wrong, curiousguy. You should have said "It's impossible to talk directly to a client as if you were operating an ad-hoc network." Scott would have typed a novel.
Oct
17
comment Can BadUsb only be delivered via USB?
"As explained by the researchers, the best protection against this vulnerability is to use code signing for firmware updates. If the signed firmware is modified, the device cannot authenticate the firmware and simply will not operate. This prevents the infection from spreading but results in an unusable device. That is why in addition to using signed firmware, IronKey protects the mechanism used to update the firmware with hardware-based security keys. This prevents tampering with the signed firmware, which would leave the device unusable."
Oct
17
revised Can BadUsb only be delivered via USB?
added 6 characters in body
Oct
17
answered Can BadUsb only be delivered via USB?
Jul
16
awarded  Notable Question
Jul
2
awarded  Curious
Jun
18
accepted OWA + AD Lockout Policy: Quite the Mixture
Jun
16
comment OWA + AD Lockout Policy: Quite the Mixture
I suppose if you use two factor you can turn off the lockout setting?
Jun
16
asked OWA + AD Lockout Policy: Quite the Mixture
Feb
25
awarded  Popular Question
Nov
25
awarded  Benefactor
Nov
25
accepted How to Man in the Middle Internal AD Traffic
Nov
21
awarded  Promoter
Nov
19
asked How to Man in the Middle Internal AD Traffic
Nov
14
comment Determining false positives when scanning for live hosts with Nmap
ARP is the way to go. The machines on the subnet you're ARP scanning have to respond to you. They have no choice
Oct
30
comment How can I detect if someone is using an ssh tunnel as a proxy to connect to a VPN?
If you are trying to put a stop to something then I would suggest strict firewall ACLs. If you don't want a user to do something then limit their ability to do so.
Oct
24
awarded  Popular Question
Aug
16
answered How to block some websites and torrent usage in a small office?
Aug
14
comment What are the pros and cons of using fail2ban when using SSH key auth?
If anything it cuts down on your logs.
Aug
9
comment Are local firewalls necessary
It's not worth an answer, but if you would like to have network access control inside a subnet then local firewalls are the way to go.