meta user
network profile
| bio | website | |
|---|---|---|
| location | United States | |
| age | ||
| visits | member for | 1 year, 6 months |
| seen | May 19 at 7:26 | |
| stats | profile views | 8 |
IEEE Computer Society Member
|
May 19 |
answered | Is cookie-based XSS exploitable? |
|
Dec 31 |
answered | Should the serial number of multi factor devices be removed? |
|
Dec 31 |
comment |
OS fingerprinting: can I rely on the results? not only honey pots change the responses from a web server, an administrator could easily change the banner displayed when anyone connects to their web server. This is considered best practice and is primarily a method of security through obscurity. |
|
Dec 31 |
answered | Is it useful to determine the name of the server software while doing a penetration test? |
|
Dec 30 |
comment |
Do client certificates provide protection against MITM? TOR is your enemy in this scenario. If you are not using SSL now and are handling user sessions through this connection all traffic can be MITM'ed or sniffed at the exit node or anywhere else en route. |
|
Dec 30 |
answered | How I add cookie to w3af for authenticated attacks? |
|
Nov 28 |
comment |
Does AV software protect web applications (Twitter, Facebook, etc) from attacks? (CSRF, etc) XSS is a client side attack vector and can be protected against by many current browsers |
|
Nov 13 |
awarded | Yearling |
|
Jun 10 |
comment |
What features do you look for in an Enterprise Log Management solution? Big Brother bb4.com is a great example of such an enterprise network monitoring tool. |
|
Jun 7 |
awarded | Commentator |
|
Jun 7 |
comment |
Detect what is running on an open port? what is the make and model of the camera? |
|
Jun 6 |
answered | Recommendations for documenting security code review |
|
May 29 |
comment |
Is my sons' school portal in violation of any Password/UserID rules? well if they are sending the password throughout the year it does sound like security is an afterthought for sure. IF the database containing the passwords is encrypted (as it should be) they should not be able to view the plain text of the password. With both being sent in plain text via email and USPS this is a huge risk! |
|
May 29 |
comment |
Global Networks - Are there any other than the Internet? perhaps SIPRNET ? |
|
May 29 |
answered | Would our company system be more secure using a VPN? |
|
May 27 |
comment |
What is your way to create good passwords that can actually be remembered? lastpass password generator, then you only have to make one secure password and can generate as many passwords as you want without having to remember tons of different passwords. |
|
May 9 |
comment |
What is the procedure to follow against a security breach? I would say that the employees account needs to be disabled prior to informing them that they are fired. |
|
May 8 |
comment |
What is the procedure to follow against a security breach? develop a CSIRT(computer security incident response team) and gather data using forensic methods include a chain of custody in order for the evidence to be used to press legal charges |
|
Mar 31 |
comment |
How did the spam email sender get my name? you purchased something using moneybookers but it was not from moneybookers correct? what site is sending you the product? they may have obtained you name from moneybookers and then sold your information is my guess |
|
Mar 30 |
awarded | Critic |
