13,630 reputation
12060
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 10 months
seen 24 mins ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


31m
comment How secure are the FIDO U2F tokens
More than that, your answer has really helped me and enabled me to talk to people in my company about U2F.
33m
comment How secure are the FIDO U2F tokens
No! Totally appreciative! We get people shilling their own stuff and it creates complications. The Internet really needs to develop that Sarcasm font.
44m
comment Is Firefox Password Manager less secure than LastPass?
in the question, he includes Firefox Sync as a component for apples-to-apples comparison
46m
comment Does access to a BISmark router mean access my network?
I'm not attacking the BISmark project, or suggesting anything nefarious, but shell access to a router with capabilities to upgrade the device does also provide the option of deeper access, although I am not suggesting that anyone at BISmark would exercise that option.
49m
comment Does access to a BISmark router mean access my network?
I can appreciate the privacy policy, but that only implies that you won't, not that you can't. If someone has access to a router, they also have access to DNS, port forwarding, and traffic flow. Can you elaborate on your statement that there is no implied ability to access other devices?
59m
comment Why is the USER = N/A and what does event 4689 means?
"N/A" means "not available" or "not applicable" It means there is no 'user' because it is a process. Have you done a Google search for "event ID 4689"?
1h
answered Does access to a BISmark router mean access my network?
1h
comment how to embed exe file to pdf?
First off, are you sure that embedding an exe in a PDF is possible? Do you have a source for wanting to go in this direction?
1h
reviewed Leave Closed facebook login notification: Correct ip but wrong browser info
19h
comment How to securely implement a JAAS
You changed the link from the JAAS documentation source to a tutorial. I'd still point you to your original link. It has the documentation that you are looking for.
19h
reviewed Leave Open Best practice to secure an API of unknown structure that can come from end user device or server
19h
reviewed Close Anonymity through Tor over VPN
19h
comment How to securely implement a JAAS
I would have linked to the very URL you referenced. I'm not sure what you're asking for.
19h
comment Is there any way for me to trace the TeamViewer ID of a machine that hacked in?
I'm not sure there is much of an answer here. There is general advice on having been hacked, and that's it. The OP is not addressed.
19h
revised Is there any way for me to trace the TeamViewer ID of a machine that hacked in?
wording, removed a coloquialism
19h
comment Anonymity through Tor over VPN
You seem to include several vectors of info-leakage (network, host, browser, VPN account data, etc.). That's a lot for us to tackle all at once. Could you narrow down your focus to something we could answer?
19h
revised Anonymity through Tor over VPN
spelling
21h
reviewed Reject suggested edit on Should I remotely store my salt?
23h
comment If am using Stripe am I SAQ A-EP in PCI V3
Link-only answers are not very helpful if the link changes. Can you summarize in a way that is relevant to the OP? Can you also provide a source for the 2nd point you made? Overall, this answer is light on detail.
23h
revised If am using Stripe am I SAQ A-EP in PCI V3
formatting