13,967 reputation
12161
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 10 months
seen 1 hour ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


1h
reviewed Approve suggested edit on Why use a Smartcard for (Two Factor) Auth instead of another medium?
2h
comment How to report vulnerabilities without being regarded as a hacker?
@AJHenderson I completely understand, but the OP mentioned that he ran Wireshark and that seems to be the thrust of his concern about being perceived as a 'hacker'. He can, of course, simply mention that the protocol is incorrect, but to 'prove' it by showing his credentials in the clear in a packet dump can, potentially, cause some people some concern.
2h
answered Why use a Smartcard for (Two Factor) Auth instead of another medium?
3h
comment Sticky keys on RDP
The author does not explain themselves, so it is a little difficult to answer your question about how they did it.
3h
reviewed Close Can I create a fake AP with my wireless card?
3h
reviewed Leave Open Are there any good tools to test the encryption quality of data?
3h
reviewed Leave Open Why are drives overwritten three times when being disposed of?
3h
reviewed Leave Closed Example websites that have invalid certificates
3h
comment How to report vulnerabilities without being regarded as a hacker?
If the "legal action/traction" assertion: the OP is from Canada, and I can assure you from personal experience, that legal action would only be taken seriously if there was actual loss (i.e. an actual compromise). The general public threatening lawsuits where there is no loss is regarded as noise.
3h
awarded  Nice Answer
3h
comment How to report vulnerabilities without being regarded as a hacker?
I made 2 assertions, which would you like evidence of?
13h
reviewed Close nginx poodle fix configuration
13h
reviewed Approve suggested edit on Will an ISP give out network/traffic info upon request?
18h
comment Is there any defense against Brute-Force done on a local encrypted file?
unless your first guess happened to be the correct one ....
19h
revised What is the point of JSON Web Token?
added 17 characters in body
19h
answered Is there any defense against Brute-Force done on a local encrypted file?
19h
reviewed Reviewed What is the point of JSON Web Token?
19h
comment Trust level of whole disk encryption software
Love the abacus, but you can perform acoustic analysis on the clacking and determine the calculations made :)
19h
comment Can anyone be hacked?
In the end, your proposal appears in line with my own. I'm sorry if I hit hot-button terms that made it appear otherwise.
19h
comment Can anyone be hacked?
I also agree that the AV * EF = SLE model is flawed, but the cost of public information is lower than sensitive intellectual property.