2,183 reputation
1026
bio website
location
age
visits member for 3 years, 4 months
seen 21 hours ago

Just a young blood trying to make it in this industry.


Dec
23
comment Corporate Domain-Joined PC Used in China
@Nick My rebuttal is not the same thing at all. I acknowledge that different geographical and networks will be higher risk that others, but anyone who is conscious about security should be prudent with operation security no matter where they reside, it should only be "high risk areas" that you describe. I would employ the same OpSec with my critical data and computers in Australia, Switzerland, Canada as I would in China, North Korea or Nigeria. My point is that you should always assume there is a risk and act accordingly.
Dec
23
comment Corporation Best Practices for Encrypting Locally Stored Email Data
Perhaps it's worth noting that EFS will encrypt the data at rest - If the computer is on and unlocked that data is presumably accessible and once it leaves the local file system it is not subject to encryption.
Dec
23
comment Corporate Domain-Joined PC Used in China
@Nick You've twisted my words. I said that the country of China does not introduce threats you wouldn't see elsewhere, not that the risk is exactly the in each geographical area. That is, if you think that you're only going to face malice in China (even if it happens to be state sponsored) then you would be mistaken.
Dec
23
answered Corporate Domain-Joined PC Used in China
Dec
23
comment VPN Usage in China
Your firewall and VPN setting are what separate your corporate assets from the constant threat of the internet. With that said you should have VPN and firewall set up based on the presumption that people are always trying to compromise your firewall - an employees travel plans should have no effect on your config.
Dec
18
awarded  Popular Question
Dec
10
awarded  Notable Question
Nov
5
reviewed Approve Security through obscurity - “https requests” are safe?
Oct
20
reviewed Approve How secure is TeamViewer for simple remote support?
Oct
17
reviewed Approve What should a security audit report include?
Oct
4
reviewed Approve How to generete dictionary for brute force attack?
Oct
3
reviewed Approve Why “() { :;};”?
Sep
29
reviewed Approve Can an compressed virus still do any harm to an OS
Sep
26
reviewed Approve What is cleardot.gif next to the senders signature in Gmail?
Sep
26
reviewed Approve What do shellshock attacks look like in system logs?
Sep
25
reviewed Approve Google+ Sign In - One Time Code Flow vs Pure Server Side flow
Sep
24
awarded  Autobiographer
Sep
24
revised Why do testers often use the single quote ( ' ) to test for SQL injection?
Removed unnecessary opening statement
Sep
24
reviewed Approve Why do testers often use the single quote ( ' ) to test for SQL injection?
Sep
21
reviewed Approve Pentesting an ATM OS upgraded from Windows XP to Windows 7