network profile
| bio | website | github.com/vpereira |
|---|---|---|
| location | Delaware | |
| age | 33 | |
| visits | member for | 2 years, 6 months |
| seen | 2 days ago | |
| stats | profile views | 28 |
Developer and Security analyst
|
May 19 |
comment |
Did someone really plug an iphone in, or are these symptoms of an exploit attempt? who is George? Can you check how many Georges are workin at night shift? |
|
May 19 |
comment |
Is a rand from /dev/urandom secure for a login key? a pragmatic answer +1 |
|
May 19 |
comment |
How to find out that a NIC is in promiscuous mode on a LAN? nice complement! |
|
May 18 |
awarded | Nice Answer |
|
May 16 |
comment |
extract from pcap all protocols found yes i love pcapr but it is for a internal project, i cannot use them :-/ |
|
May 10 |
revised |
How to review code for backdoors? added 5 characters in body; deleted 3 characters in body |
|
May 10 |
comment |
How to review code for backdoors? yes, but remember that people that goggle for "How to review code for backdoors?", will arrive here and maybe for them, it's already not too late ;-) |
|
May 10 |
answered | How to review code for backdoors? |
|
May 10 |
comment |
How to review code for backdoors? @Rory Alsop - Yes, right tools, humans and business knowledge. But everything should be done together with the development. After, it is really hard to pay a analyst to do magic or to buy a specific tool. So my opinion the best way to review code for backdoor is together with the development and not after. |
|
May 10 |
comment |
How to review code for backdoors? The problem is that all answers now are understanding backdoor as simple a network backdoor, but it can be as well an "easter egg". An example, a logic backdoor in a ATM that allows a bad guy to withdraw all money from the ATM. |
|
May 9 |
awarded | Scholar |
|
May 9 |
accepted | extract from pcap all protocols found |
|
May 7 |
answered | Is flash or javascript a bigger security concern? |
|
May 7 |
awarded | Commentator |
|
May 7 |
comment |
what is a good public available iptables script for ddos mitigation? yes, upstream is the right place to do. But from his question we cannot assume that he is an end-user. Maybe he is a netadmin, under attack from a small ISP without no clue :-) |
|
May 6 |
comment |
what is a good public available iptables script for ddos mitigation? the iptable maybe is not running locally in his server. maybe its a gateway, or even a router running Zebra or Quagga. |
|
May 6 |
answered | How to find out that a NIC is in promiscuous mode on a LAN? |
|
May 6 |
comment |
extract from pcap all protocols found i think i will choose this one. i liked the tcpdstat, and i think i will use it, but since my question was about the tshark, i think this result is the best, for my needs, using tshark. |
|
May 6 |
awarded | Supporter |
|
May 6 |
comment |
extract from pcap all protocols found i will check it. looks good. |
