615 reputation
1610
bio website github.com/vpereira
location Delaware
age 34
visits member for 3 years, 11 months
seen Oct 16 at 22:51

Developer and Security analyst


May
7
comment what is a good public available iptables script for ddos mitigation?
yes, upstream is the right place to do. But from his question we cannot assume that he is an end-user. Maybe he is a netadmin, under attack from a small ISP without no clue :-)
May
6
comment what is a good public available iptables script for ddos mitigation?
the iptable maybe is not running locally in his server. maybe its a gateway, or even a router running Zebra or Quagga.
May
6
answered How to find out that a NIC is in promiscuous mode on a LAN?
May
6
comment extract from pcap all protocols found
i think i will choose this one. i liked the tcpdstat, and i think i will use it, but since my question was about the tshark, i think this result is the best, for my needs, using tshark.
May
6
awarded  Supporter
May
6
comment extract from pcap all protocols found
i will check it. looks good.
May
6
awarded  Student
May
6
asked extract from pcap all protocols found
May
4
answered Does PCI compliance really reduce risk and improve security?
May
3
comment Why re-verify with CAPTCHA on failed form entry?
maybe in YOUR application it shouldn't be secret. But in other applications, where the user name a social security number is the user, maybe for privacy the stakeholders want that as well private.
May
2
comment Why re-verify with CAPTCHA on failed form entry?
@João Portela, i don't know where in my comment i stated that. Do I?
May
2
comment Why re-verify with CAPTCHA on failed form entry?
for example, forms that allows the hacker to do user enumeration. e.g: if in the error message you can identify if the user that you are trying to create already exist. You can use it to find valid users and then do a more precise bruteforce :-)
May
2
comment Why re-verify with CAPTCHA on failed form entry?
i fixed my answer :-)
May
2
awarded  Editor
May
2
revised Why re-verify with CAPTCHA on failed form entry?
added 104 characters in body
May
1
answered Why re-verify with CAPTCHA on failed form entry?
Apr
26
awarded  Teacher
Apr
26
answered Can you provide loss values on security breaches?
Apr
26
answered How can I detect users that have requested AD Administrators to reuse an expired password?
Apr
26
comment Why re-verify with CAPTCHA on failed form entry?
what you mean with "another CAPTCHA"? it did ask once and then after an failed login attempt, it show one another CAPTCHA?