meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 7 months |
| seen | 7 hours ago | |
| stats | profile views | 107 |
.NET developer, insanely obsessed with security.
All this time thinking about whether or not you could, you never stopped to think about whether or not you should.
|
Apr 30 |
awarded | Fanatic |
|
Apr 29 |
revised |
It's necessary setup a firewall in both PC and router? edited body |
|
Apr 19 |
revised |
Organization like OWASP for network security? added 10 characters in body |
|
Apr 19 |
answered | Organization like OWASP for network security? |
|
Apr 19 |
revised |
Is there any sense in using two-step authentication for personal email address? added 2 characters in body |
|
Apr 19 |
revised |
Is there any sense in using two-step authentication for personal email address? added 241 characters in body |
|
Apr 19 |
revised |
Is there any sense in using two-step authentication for personal email address? added 94 characters in body |
|
Apr 19 |
answered | Is there any sense in using two-step authentication for personal email address? |
|
Apr 16 |
comment |
How do random attackers discover websites to target? Well, then I withdraw my objection and vote this up for being good advice. This does answer the original title perfectly. ;-) |
|
Apr 9 |
awarded | Altruist |
|
Apr 8 |
awarded | Investor |
|
Apr 8 |
comment |
Can I determine if my computer has a key logger installed? @Luc good idea. |
|
Mar 22 |
comment |
Is it safer to design websites and servers with HTML5 rather than flash? Just checking... You're not doing anything that involves creating a login for the where Flash is handling the authentication, are you? I watched a video about six months ago that showed how simple it is to bypass that. Some web sites have flash content that's supposed to be "secure" and they used a Flash Login to protect it, but it's so easy to bypass that, you may as well not be bothering to provide a login at all. There's a blog post covering it here: blog.philippheckel.com/2011/03/01/… |
|
Mar 8 |
comment |
How do anti-virus apps for Android work? I'm not sure if this should be a separate question, or a comment on your answer, but I'm confused about how Google could claim that malware is being stopped at the app repository, or anywhere for that matter, when all of the articles I read show that the Android platform is by far the most infected platform there is. (Example: zdnet.com/…) Are these articles wrong, or is Google wrong, or am I just misunderstanding something? |
|
Mar 4 |
comment |
Site constantly getting infected Ahhh.. Good point. You're thinking of forensics and finding the culprit. I wasn't thinking that route... I was just thinking of defenses to have in place. Good thinking! |
|
Mar 4 |
comment |
Site constantly getting infected That may suffice as a layer of protection, but I wouldn't rely on it. We pay through the nose for a high-end Web Application Firewall, and we are increasingly seeing attacks getting past it and (thankfully) getting caught and blocked by our code. No single tool is enough, and there is no substitute for a securely written website. A properly written website (defending against known attacks, following OWASP guidelines at a minimum) is only one layer of defense, but it's a critical one. The same must be said about an Application Firewall. |
|
Feb 20 |
comment |
Ethernet security LOL I'm sure someone smarter than me will answer your questions in detail. I just posted what I'd do if I really didn't trust the company not to steal my secrets. |
|
Feb 20 |
comment |
Ethernet security I don't know the answers to your questions, but have you considered getting a Air Card for your laptop that allows you to use your cell phone plan and bypass the competitor's Ethernet altogether? I'm not sure how secure they are, but I'd feel safer than plugging into a competitor's network. Alternatively, I'd get a laptop with no sensitive data and just not risk it. More info on air cards here: news.cnet.com/8300-5_3-0.html?keyword=aircard |
|
Feb 19 |
awarded | Enthusiast |
|
Feb 15 |
accepted | Good, simple list of reasons that email is inherently insecure |
