meta user
network profile
| bio | website | linkedin.com/profile/… |
|---|---|---|
| location | Denver, CO | |
| age | 39 | |
| visits | member for | 2 years, 6 months |
| seen | Apr 3 at 16:22 | |
| stats | profile views | 115 |
First used an Atari when I was 4 years old. At age 7 I learned to program in turtle Logo on a Commodore 64. When I was 11 I learned BASIC on the Apple II family. At 12 I carried that over to the IBM PC. At 18 I was trained to do Radio Repair in the Army, and at 20 I worked for AOL.
17 years later I have taught A+, Network+, held a JNCIA in routing, a JNCIS in Security, and currently hold Security+, CEH, CISSP, CCNA, CCNA Sec, and CCNP Sec certifications.
I'm also an avid amateur radio operator (WN7ANT). 73
|
Dec 28 |
comment |
How can this xss challenge be solved? I don't see where the solutions were asked for. I see where it is stated there are 5 solutions, and I see a request for assistance. Maybe someone pointing or "nudging" in the right direction would be possible? |
|
Dec 28 |
comment |
How can hotels securely receive your credit card details (for a custom, one-off payment)? That's if they have a PCI certification to begin with ;) |
|
Dec 27 |
answered | How can hotels securely receive your credit card details (for a custom, one-off payment)? |
|
Dec 19 |
comment |
Bruteforce vs Denial of Service @AviD - Thank you very much. |
|
Dec 19 |
comment |
Bruteforce vs Denial of Service @AviD - Not trying to be a pain, but is there any chance you could connect me with the proof of captcha being broken? I heard of theoretical possibilities, but didn't know there was a proof yet. Not calling you out, just the people I work with expect references. |
|
Dec 19 |
comment |
Bruteforce vs Denial of Service @schroeder - Thanks, don't know why I was at a loss for words there... |
|
Dec 19 |
comment |
Bruteforce vs Denial of Service @AviD - I did mention a modification... |
|
Dec 19 |
answered | Bruteforce vs Denial of Service |
|
Dec 14 |
awarded | Nice Answer |
|
Dec 12 |
comment |
Teaching a loved one about secure coding practices You can always start with awareness. I think it would look something like this: Okay, we've finished "Hello World." Can anyone think of a way to make this program do something it wasn't designed to do?" The likely answer will be no, and that's okay at this level. But at least ask the question. Bring forward that it is a consideration. Start the dialogue. Waiting until year three to say, "okay, you've learned all these coding techniques, now we're going to show you how vulnerable your crutches are," is bad form... isn't it? |
|
Dec 12 |
answered | Teaching a loved one about secure coding practices |
|
Dec 11 |
comment |
How To Secure running Wordpress Sites? Are there any SQL updates? Have you tried some of the things here: owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet |
|
Dec 11 |
answered | How To Secure running Wordpress Sites? |
|
Dec 7 |
comment |
Is it possible to Identify a VPN user by finding relations in traffic? The problem is, that the solution of using HTTPS does NOT fix what has been broken. TOR was an anonymizer. No one could prove you were accessing a location from a location. Even with HTTPS enabled, you can still see source and destination. All TOR will do is slow down your connection while not providing any security whatsoever. You may as well run HTTPS in a standard VPN tunnel provided by any VPN service out there... It'll be faster. |
|
Dec 7 |
accepted | Server Certificates, certificate authority, and servers |
|
Dec 7 |
comment |
Server Certificates, certificate authority, and servers I was good with hundreds, not so much with thousands... Thanks. |
|
Dec 7 |
comment |
Server Certificates, certificate authority, and servers I CLAIM to be an information security professional. I say claim, because I hadn't considered that... My use is a bit if a special case though. I wanted to be able to use this at home. I have an OS X server that I VPN back to (using the wildcard cert I think). So here's my question. Since I already have the SSL cert, I'm assuming making a different cert for the signing function is adequate to protect my home systems (set up the server as an intermediate cert auth, etc). Any other input? I appreciate it all... |
|
Dec 6 |
comment |
Server Certificates, certificate authority, and servers Is there any place you can recommend that offers a wildcard with Cert Signing? Google has NOT been my friend with this. |
|
Dec 6 |
asked | Server Certificates, certificate authority, and servers |
|
Dec 6 |
comment |
Is it possible to Identify a VPN user by finding relations in traffic? So that your aware, TOR has been hacked: zdnet.com/blog/security/… |
