595 reputation
1510
bio website github.com/vpereira
location Delaware
age 34
visits member for 3 years, 8 months
seen Apr 10 at 14:10

Developer and Security analyst


Mar
3
comment firewall with cloud based malware analysis risks
can you give me a reference for: All Firewall/ IPS vendors have a license option to use their "Intelligence Network"?
Jan
27
comment firewall with cloud based malware analysis risks
@Bernie White, that's why there is a practical example in my question. To Palo Alto FW it means something, and to their implementation I would like to know how they address those topics. To remove the FW name and add the term "Cloud based malware analysis" would be to generic
Jan
23
comment firewall with cloud based malware analysis risks
@LucasKauffman I can edit and remove the firewall name. I think it will be a common pattern in next generation firewalls
Jan
23
comment What advantages and disadvantages do Palo Alto firewalls have, compared to others in the market
great answer. thanks
Jul
21
comment What is important when selecting a VPN provider?
@PeanutsMonkey well SLA - service level agreement or how much availability do you want. for example 99%, 99.9%, doesn´t matter etc. to calculate the 24 x 7 support you must add 2 or 3 network admins workin in turns and so on
Jul
21
comment What advantages and disadvantages do Palo Alto firewalls have, compared to others in the market
Yes, I did install, for me there is some things that don't look quite well, but I would like to know really from somebody that is using daily. thanks anyway!
Jul
21
comment What advantages and disadvantages do Palo Alto firewalls have, compared to others in the market
@Rory Alsop great :-)
Jul
21
comment What advantages and disadvantages do Palo Alto firewalls have, compared to others in the market
but I want feedback from people that already used. Everything that I can find in the internet is marketing, but no single review. Maybe I can change my question to "Does anybody know a website that did a review without being paid for"? :-)
Jul
21
comment What is important when selecting a VPN provider?
Everything that you listed, can be acomplished with OpenVPN. I think the questions that really matter are: * Which SLA you need? Can you survive if, saturday night your VPN doesn't work? * if not, can you afford 24 x 7 support?
May
19
comment Did someone really plug an iphone in, or are these symptoms of an exploit attempt?
who is George? Can you check how many Georges are workin at night shift?
May
19
comment Is a rand from /dev/urandom secure for a login key?
a pragmatic answer +1
May
19
comment How to find out that a NIC is in promiscuous mode on a LAN?
nice complement!
May
16
comment extract from pcap all protocols found
yes i love pcapr but it is for a internal project, i cannot use them :-/
May
10
comment How to review code for backdoors?
yes, but remember that people that goggle for "How to review code for backdoors?", will arrive here and maybe for them, it's already not too late ;-)
May
10
comment How to review code for backdoors?
@Rory Alsop - Yes, right tools, humans and business knowledge. But everything should be done together with the development. After, it is really hard to pay a analyst to do magic or to buy a specific tool. So my opinion the best way to review code for backdoor is together with the development and not after.
May
10
comment How to review code for backdoors?
The problem is that all answers now are understanding backdoor as simple a network backdoor, but it can be as well an "easter egg". An example, a logic backdoor in a ATM that allows a bad guy to withdraw all money from the ATM.
May
7
comment what is a good public available iptables script for ddos mitigation?
yes, upstream is the right place to do. But from his question we cannot assume that he is an end-user. Maybe he is a netadmin, under attack from a small ISP without no clue :-)
May
6
comment what is a good public available iptables script for ddos mitigation?
the iptable maybe is not running locally in his server. maybe its a gateway, or even a router running Zebra or Quagga.
May
6
comment extract from pcap all protocols found
i think i will choose this one. i liked the tcpdstat, and i think i will use it, but since my question was about the tshark, i think this result is the best, for my needs, using tshark.
May
6
comment extract from pcap all protocols found
i will check it. looks good.