520 reputation
29
bio website
location United States
age
visits member for 3 years, 1 month
seen Jul 22 at 20:56

IEEE Computer Society Member


Jul
29
awarded  Popular Question
Mar
18
comment Is it possible to locate a cellphone's location just by ringing it?
My phone is usually lost in the couch when I can't find it so ringing it usually does the trick unless the ringer is off ;)
Dec
28
comment arp request to a ghost host
does the IP address show up in your DHCP server?
Dec
26
answered Shall I enable 'send all traffic over VPN' on my Mac?
Dec
26
answered Can non-https assets be tampered with?
Nov
13
awarded  Yearling
Jul
28
comment How to download data anonymously?
what are you trying to download? might want to be more specific
May
19
answered Is cookie-based XSS exploitable?
Dec
31
answered Should the serial number of multi factor devices be removed?
Dec
31
comment OS fingerprinting: can I rely on the results?
not only honey pots change the responses from a web server, an administrator could easily change the banner displayed when anyone connects to their web server. This is considered best practice and is primarily a method of security through obscurity.
Dec
31
answered Is it useful to determine the name of the server software while doing a penetration test?
Dec
30
comment Do client certificates provide protection against MITM?
TOR is your enemy in this scenario. If you are not using SSL now and are handling user sessions through this connection all traffic can be MITM'ed or sniffed at the exit node or anywhere else en route.
Dec
30
answered How I add cookie to w3af for authenticated attacks?
Nov
28
comment Does AV software protect web applications (Twitter, Facebook, etc) from attacks? (CSRF, etc)
XSS is a client side attack vector and can be protected against by many current browsers
Nov
13
awarded  Yearling
Jun
10
comment What features do you look for in an Enterprise Log Management solution?
Big Brother bb4.com is a great example of such an enterprise network monitoring tool.
Jun
7
awarded  Commentator
Jun
7
comment Detect what is running on an open port?
what is the make and model of the camera?
Jun
6
answered Recommendations for documenting security code review
May
29
comment Is my sons' school portal in violation of any Password/UserID rules?
well if they are sending the password throughout the year it does sound like security is an afterthought for sure. IF the database containing the passwords is encrypted (as it should be) they should not be able to view the plain text of the password. With both being sent in plain text via email and USPS this is a huge risk!