12,255 reputation
11654
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 8 months
seen 10 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


10h
reviewed Leave Open Application security training for developers
10h
reviewed Close Free second-level domain SSL certificate
10h
reviewed Close How to tell computer of origin sending email messages?
10h
reviewed Close i am using college lan. What can i do to ensure maximum lan security?
10h
reviewed No Action Needed What exactly determines what version of SSL/TLS is used when accessing a site?
10h
comment Building a DoS and DDoS Mitigation System from scratch
I'm not sure that this is a helpful answer at all, in any respect. The OP asks how to design from scratch, and you assume he is buying off the rack. You also have a ton of assumptions and have applied random costs. What about a distributed system across all ISPs? You need only identify a single stream of offending traffic and coordinate the info across the nodes. You cut the attack off at the source, instead of the destination. Low cost, low bandwidth, and responsive to changes in the attack.
Aug
14
comment BYOD - Confirming that Devices are Approved
Product recommendations go stale, but since you asked: Netclarity.
Aug
14
reviewed Leave Open Are newly-generated recovery passwords sent to me via email hashed?
Aug
14
revised Information Security and Financial Risks
spelling, link
Aug
14
comment Is it a bad idea for an information holder to e-mail a user their password?
If a user has 'forgotten' about the site, then offer a password reset option. Doing so means that you do not have to store the user's password in a way that breaks standard password protocols.
Aug
14
comment What are some considerations before moving personal data to Google Drive?
It is an answer, and a viable one, it is just very, very short.
Aug
14
comment How secure is KolibriOS?
"How secure is x" is not really answerable. What do you want it to be secure from?
Aug
14
reviewed Close What is the difference between a virus and a worm ?
Aug
14
reviewed No Action Needed Choosing right way to secure access to server access via socket
Aug
14
answered BYOD - Confirming that Devices are Approved
Aug
13
comment Confidentiality of file hashes
You say that hashes are not reversible, but wondering if hashes are reversible? You seem to have the answer you are looking for.
Aug
13
comment Would it be illegal if one downloaded the entire internet?
Legal questions are off-topic here, and there is nothing in this question about IT Security. This is a philosophical thought exercise.
Aug
13
comment BYOD - Confirming that Devices are Approved
Why do you want to approve the device along with the user? What problem does that control address? If the user can walk out with the device, (because BYOD), then what is mitigated by limiting what is used?
Aug
13
comment BYOD - Confirming that Devices are Approved
You would seem to require an agent-based solution. You install the agent on the approved devices and only those can connect.
Aug
13
reviewed Leave Open Is it safe to store passwords on Google drive?