585 reputation
1410
bio website github.com/vpereira
location Delaware
age 34
visits member for 3 years, 5 months
seen Apr 10 at 14:10

Developer and Security analyst


Jul
21
comment What is important when selecting a VPN provider?
Everything that you listed, can be acomplished with OpenVPN. I think the questions that really matter are: * Which SLA you need? Can you survive if, saturday night your VPN doesn't work? * if not, can you afford 24 x 7 support?
Jul
21
asked What advantages and disadvantages do Palo Alto firewalls have, compared to others in the market
Jul
4
answered 2 factor authentication - cost effective solution for a web startup
May
25
awarded  Enlightened
May
19
comment Did someone really plug an iphone in, or are these symptoms of an exploit attempt?
who is George? Can you check how many Georges are workin at night shift?
May
19
comment Is a rand from /dev/urandom secure for a login key?
a pragmatic answer +1
May
19
comment How to find out that a NIC is in promiscuous mode on a LAN?
nice complement!
May
18
awarded  Nice Answer
May
16
comment extract from pcap all protocols found
yes i love pcapr but it is for a internal project, i cannot use them :-/
May
10
revised How to review code for backdoors?
added 5 characters in body; deleted 3 characters in body
May
10
comment How to review code for backdoors?
yes, but remember that people that goggle for "How to review code for backdoors?", will arrive here and maybe for them, it's already not too late ;-)
May
10
answered How to review code for backdoors?
May
10
comment How to review code for backdoors?
@Rory Alsop - Yes, right tools, humans and business knowledge. But everything should be done together with the development. After, it is really hard to pay a analyst to do magic or to buy a specific tool. So my opinion the best way to review code for backdoor is together with the development and not after.
May
10
comment How to review code for backdoors?
The problem is that all answers now are understanding backdoor as simple a network backdoor, but it can be as well an "easter egg". An example, a logic backdoor in a ATM that allows a bad guy to withdraw all money from the ATM.
May
9
awarded  Scholar
May
9
accepted extract from pcap all protocols found
May
7
answered Is flash or javascript a bigger security concern?
May
7
awarded  Commentator
May
7
comment what is a good public available iptables script for ddos mitigation?
yes, upstream is the right place to do. But from his question we cannot assume that he is an end-user. Maybe he is a netadmin, under attack from a small ISP without no clue :-)
May
6
comment what is a good public available iptables script for ddos mitigation?
the iptable maybe is not running locally in his server. maybe its a gateway, or even a router running Zebra or Quagga.