Reputation
Next tag badge:
153/100 score
19/20 answers
Badges
14 88 160
Newest
 Nice Answer
Impact
~1.3m people reached

May
12
comment Professional certifications for IT Security
@john, from the context it seems like he meant the first - i.e. claimed years of experience they did not have, and thus received the cert that they were not entitled to.
May
12
revised What are the career paths in the computer security field?
added 674 characters in body
May
12
comment In what ways does Full or Partial Homomorphic Encryption benefit the cloud?
I thought it was only "homomorphic computations" which are possible, i.e. a subset of mathematical and set operations?
May
12
answered What are the career paths in the computer security field?
May
12
comment IPV6 Cryptographically Generated Address implementation
@Rory, usually in cryptography-related issues, we answer "how to implement" with: "Don't." As in, he should use standard implementations - and how to do that is very much ontopic, IMO...
May
12
comment Browser hijacked - how to fix and prevent?
Also, on this site we prefer not to deal with the specifics of a given virus, as these are constantly changing, and the answers would be out of date very quickly. Instead, we prefer to focus on the principles and strategies of how to deal with these classes of virii, in general.
May
12
comment CEH or GIAC - Which one should I pursue?
@TheLearner, you might also be interested in my answer on this SO question: What is the day to day role of a Security Analyst/Engineer?. This can give you a better idea of the various, very different career paths in "the security field" (actually, I would call them fields...)
May
12
comment How does LastPass' grid multi-factor authentication work behind the scenes?
From a quick perusal, I'd point out that this is not a true second factor. Since the grid is not "something you have", but only "something you might have a copy of", there is no guarantee that you have the original, and only you have the only copy.
May
12
comment What's the difference between an access control method, security model, and security policy?
+1, though AC can also be used to control availability (to some extent). Also, "Security Policy" tends to be overridden in several completely disparate contexts: e.g. your firewall has a "security policy", your OS and domain have "security policies", heck Sharepoint might have a "security policy". Some of these are broad outlines, some of these are very technical and are really "security models", and some are the actual implementation of that policy.
May
12
comment What's the difference between an access control method, security model, and security policy?
This is wrong, Access control is very specifically not just about confidentiality. Access control can also protect integrity, and even availability in some situations. Even in the class AC models, you have Biba...
May
12
comment Is there a way to identify the host of a malicious VM from across the network?
Ah, I guess so. Because if there where multiple copies of the same VM, with identical MACs, it would create a conflict anyway...?
May
12
comment Is there a way to identify the host of a malicious VM from across the network?
@Rory, but doesnt that mean you won't be able to identify which it is?
May
12
revised What's the difference between an access control method, security model, and security policy?
edited tags
May
11
revised Additional security of keyfile on top of a master password for KeePass
edited tags
May
11
comment How does LastPass' grid multi-factor authentication work behind the scenes?
For those not familiar with it, can you provide a link, or a description?
May
11
revised How does LastPass' grid multi-factor authentication work behind the scenes?
edited tags
May
11
comment Peer review of C# cryptography for Azure Table security
Too late at night for me to dig into it right now, I'll try tomorrow... But in the meantime, if you're on .NET 4, why use RijndaelManaged, instead of AesManaged?
May
11
comment Is there a way to identify the host of a malicious VM from across the network?
This sounds odd to me, I know that if you copy a VM, it will retain the MAC of the previous copy. So if I then copy the VM to another machine, is the MAC supposed to change?
May
11
comment Access to other local files from a local HTML file
+1. An even more common scenario is installation media, including e.g. a readme.html file.
May
11
revised Access to other local files from a local HTML file
edited tags