595 reputation
1510
bio website github.com/vpereira
location Delaware
age 34
visits member for 3 years, 8 months
seen Apr 10 at 14:10

Developer and Security analyst


May
6
comment what is a good public available iptables script for ddos mitigation?
the iptable maybe is not running locally in his server. maybe its a gateway, or even a router running Zebra or Quagga.
May
6
answered How to find out that a NIC is in promiscuous mode on a LAN?
May
6
comment extract from pcap all protocols found
i think i will choose this one. i liked the tcpdstat, and i think i will use it, but since my question was about the tshark, i think this result is the best, for my needs, using tshark.
May
6
awarded  Supporter
May
6
comment extract from pcap all protocols found
i will check it. looks good.
May
6
awarded  Student
May
6
asked extract from pcap all protocols found
May
4
answered Does PCI compliance really reduce risk and improve security?
May
3
comment Why re-verify with CAPTCHA on failed form entry?
maybe in YOUR application it shouldn't be secret. But in other applications, where the user name a social security number is the user, maybe for privacy the stakeholders want that as well private.
May
2
comment Why re-verify with CAPTCHA on failed form entry?
@João Portela, i don't know where in my comment i stated that. Do I?
May
2
comment Why re-verify with CAPTCHA on failed form entry?
for example, forms that allows the hacker to do user enumeration. e.g: if in the error message you can identify if the user that you are trying to create already exist. You can use it to find valid users and then do a more precise bruteforce :-)
May
2
comment Why re-verify with CAPTCHA on failed form entry?
i fixed my answer :-)
May
2
awarded  Editor
May
2
revised Why re-verify with CAPTCHA on failed form entry?
added 104 characters in body
May
1
answered Why re-verify with CAPTCHA on failed form entry?
Apr
26
awarded  Teacher
Apr
26
answered Can you provide loss values on security breaches?
Apr
26
answered How can I detect users that have requested AD Administrators to reuse an expired password?
Apr
26
comment Why re-verify with CAPTCHA on failed form entry?
what you mean with "another CAPTCHA"? it did ask once and then after an failed login attempt, it show one another CAPTCHA?
Apr
26
comment Why re-verify with CAPTCHA on failed form entry?
no if the site, without CAPTCHA is vulnerable to CSRF. The browser being authenticated don't means that the user is authenticated to do this action. Example: h-online.com/security/…