meta user
network profile
| bio | website | ericgoldman.name |
|---|---|---|
| location | Chicago, IL | |
| age | ||
| visits | member for | 1 year, 8 months |
| seen | 12 hours ago | |
| stats | profile views | 81 |
Currently, IT Security Consultant for multinational, focusing on application risk. Previously IT Auditor for a large accounting firm, where I performed IT Audits and Pen Testing for financial services, healthcare, and other industries.
|
Apr 5 |
revised |
Can one reliably show HTTPS status in browser (not just the lock in the URL bar)? added another ref |
|
Apr 5 |
answered | Can one reliably show HTTPS status in browser (not just the lock in the URL bar)? |
|
Apr 3 |
revised |
Prevent unauthorized workstations from joining a Windows Domain clarified title. |
|
Apr 3 |
revised |
Prevent unauthorized workstations from joining a Windows Domain added links |
|
Apr 3 |
answered | Prevent unauthorized workstations from joining a Windows Domain |
|
Apr 3 |
reviewed | No Action Needed List of methods in iOS that have been deprecated for security reasons? |
|
Apr 3 |
answered | How general should a vulnerability be to be eligible for a CVE? |
|
Apr 2 |
awarded | Custodian |
|
Apr 2 |
reviewed | Approve suggested edit on Is this fprintf statement potentially vulnerable? |
|
Apr 2 |
reviewed | No Action Needed jasypt message integrity |
|
Apr 2 |
comment |
VPN using SmartPhone Location Please expand your question with some more detail. Are you talking about IP address location or something specific to your VPN? What exactly do you mean by the VPN knowing where you are - like office network vs home network or physical location like GPS coordinates? |
|
Apr 2 |
reviewed | Reviewed VPN using SmartPhone Location |
|
Apr 1 |
comment |
Voice Call Safety On the other side, it's cheaper for an attacker to go the malware route on your PC or phone. Otherwise, they would have to guess which calls to listen in on, which is a lot more difficult and time consuming. If someone is attacking your phone line, you are likely under a targeted attack - rare from the bank's point of view - and if that attacker wants you, he will be trying multiple methods as well. |
|
Apr 1 |
comment |
Voice Call Safety Risk management. What is the likelihood and how much of an impact will it have on the bank? Did you give your full account number as well on the line? Even if the attacker gets your account number and pin, how much damage can they do before the bank's fraud systems kick in, and what is the likehlihood they cannot reverse the transactions. If your account was a high risk to the bank, your logon would have 2 factor auth, and they would monitor your account more closely. It's a security threat, but a lower risk that you may perceive. |
|
Apr 1 |
comment |
Voice Call Safety When I refer to an encrypted channel, I mean from end-to-end, That would means its encrypted on your phone and then decrypted on the receivers phone. Any encryption between you and the tower is fine, but not end-to-end. It's kind of like WPA on WiFi versus HTTPS on your secure web connection. The government can get a warrant and tap your line, and likely so could a phreaker (without a warrant). It's also more likely you'd have malware on your phone recording the call then wasting time trying to MiTM the line. |
|
Apr 1 |
answered | Voice Call Safety |
|
Apr 1 |
reviewed | Reviewed Using SSL on my sites for everything or just some things? |
|
Apr 1 |
comment |
Is it ok to cut some digits from the front-face of a credit/debit card? We forgot to mention, you can always get traveler's cheques. |
|
Apr 1 |
answered | Why improvising your own Hash function out of existing hash functions is so bad |
|
Mar 31 |
awarded | Suffrage |
