Eric G

3,031 reputation

425

bio	website	ericgoldman.name
	location	Chicago, IL
	age
visits	member for	1 year, 8 months
	seen	May 20 at 21:16
stats	profile views	83

Currently, IT Security Consultant for multinational, focusing on application risk. Previously IT Auditor for a large accounting firm, where I performed IT Audits and Pen Testing for financial services, healthcare, and other industries.

	3,031 reputation	bio	website	ericgoldman.name	visits	member for	1 year, 8 months
425 badges		location	Chicago, IL		seen	May 20 at 21:16

summary answers questions tags badges favorites bounties reputation activity

418 Actions

suggestions reviews revisions comments badges posts accepts all

Apr 26	comment	Is it safe to allow users multiple login at different browsers & computers? Google allows multiple logins because they are tracking multiple factors in the backend, such as country, IP, etc. They also are likely mapping your patterns, have options for multi-factor authentication, and have a lot of monitoring. My guess is the downvotes resulted from saying that google does it so it must be okay. The risks and ability to mitigate risks will differ from org to org.
Apr 26	comment	Security precautions for shared iPads in a customer facing corporate environment Is (1) just a remote desktop suggestion, or another avenue? If remote desktop, what solutions work and still provide the "iPad" goodness of using fingers, low latency, apps. etc. Want to look slick for the customers, not an iPad logging into a windows desktop :-) For (2), can you provide more detail in your response - will this integrate with AD/LDAP, etc or is this just local users / local auth.
Apr 26	comment	Security precautions for shared iPads in a customer facing corporate environment Let's go on the assumption that the C-Level guys think iPads are cool and are driving this against the wishes of IT (that never happens anywhere, right?). Even if all the apps were web based, I imagine there should still be concerns over credentials, PDFs that get loaded, email app (maybe they will use web based email, maybe not), printing, etc.
Apr 26	asked	Security precautions for shared iPads in a customer facing corporate environment
Apr 26	reviewed	Reviewed How web browser can shutdown computer
Apr 25	reviewed	Approve suggested edit on What is the difference between authorized_key and known_host file for SSH?
Apr 24	reviewed	Reviewed Is there any security threat with open WiFi connection?
Apr 24	comment	Is there any security threat with open WiFi connection? You should clarify your answer in regards to the "fine" you note. This may only be in some countries (i.e., India). In addition, the OP notes he is connecting to a insecure network, not setting one up.
Apr 24	reviewed	Reviewed Is there any security threat with open WiFi connection?
Apr 24	revised	Is there any security threat with open WiFi connection? unnecesary opening
Apr 24	answered	What is the disadvantage of using spoofing protected version of ARP protocol
Apr 24	comment	What is the disadvantage of using spoofing protected version of ARP protocol Can you post the title of the article you were trying to read from IEEE, some others may have access and may be able to read and comment.
Apr 24	reviewed	No Action Needed multiple hash values in a single malware file
Apr 24	answered	Is there any public information on audited Java open source projects?
Apr 23	revised	Enable RDP for internal network only deleted 11 characters in body
Apr 23	answered	Enable RDP for internal network only
Apr 22	answered	How can I circumvent the lack of Java updates?
Apr 22	comment	Is there any SQL injection for this PHP login example? If you are new to PHP, I would not recommend writing your own logon form. I would try to plug in some framework or at least find an example where the author stresses security in the title. You should of course now how to look for faults, but there are many complexities and bad things that can happen even beyond SQL injection from a logon form.
Apr 22	revised	Is there any SQL injection for this PHP login example? Fixed title, corrected grammar, added relevant tags; eg removed unneccesary greetz and fixed indentation on first code sample
Apr 21	reviewed	Reject suggested edit on Are latency based Proof-of-Work systems capable of preventing DDoS attacks on popular hidden tor services (.onion websites)?