17,661 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 3 months
seen 8 hours ago

Security Architect


17h
comment Best practices for encryption from web<-> specific client
I'm also confused about why you are encrypting the data again within an SSL stream.
17h
comment Best practices for encryption from web<-> specific client
within what limitation? are the 6 steps the limitation or the thing you want to improve?
19h
reviewed Close Encoding scheme and padding with '='
19h
reviewed Close I want to figure out how cookies/ session variables interact to validate a user session
19h
reviewed Close How to merge modsecurity rules?
19h
reviewed Approve Flash ignores Content-Type header, allowing XSS?
20h
comment Setting up a security lab, looking for a little guidance
possible duplicate of Securely building a local pentest lab in a VM
2d
comment What kind of backdoor can be made after hacking wi-fi?
difficult or not, the problem remains that the only way to do what you want is to either reconfigure the router or exploit an install malware
2d
revised Are there any alternatives to EFS for transparently encrypting the contents of a folder in Windows?
added 1 character in body
2d
comment Are there any alternatives to EFS for transparently encrypting the contents of a folder in Windows?
your title says to encrypt a folder, but the body says the entire drive - which are you looking for?
2d
comment What kind of backdoor can be made after hacking wi-fi?
Most routers have some kind of setting that allows access to the admin login page from the WAN interface (Internet). Turn this on, and you have access to the router. As for installing exploits, that would really depend on the router.
2d
revised What kind of backdoor can be made after hacking wi-fi?
deleted 80 characters in body
2d
reviewed Leave Closed Find the installer of a Rootkit and reason for attack on a Linux OS?
2d
comment What kind of backdoor can be made after hacking wi-fi?
Being wifi, you could re-hack the wifi password, but that's not what you're asking
2d
comment What kind of backdoor can be made after hacking wi-fi?
Once the wifi password has changed you lose access to the network - any backdoor would have to connect outwards from the network. You could think of the problem in the same way as "how do you plant a backdoor if you only get one shot to physically be connected to the network?" There are numerous ways to do this depending on your focus. Can you narrow your question down a little?
2d
comment SSL cipher suite usage statistics based on captured data
the answer will be server OS-specific as well as web server-specific - voting to migrate to serverfault
2d
revised Exploiting snmp private string
removed phrases, added punctuation
2d
comment Should Information Security staff have Local Admin and Domain Admin Privileges
It will really depend on your environment and what roles, access, and activity the InfoSec staff are supposed to have. In general, no, they should not have that access, just as no one should except for the designated admins of the organization. But, sometimes, the InfoSec staff ARE the admins, so they need access. Pleased edit your question to provide relevant details on your situation.
2d
revised Should Information Security staff have Local Admin and Domain Admin Privileges
deleted 17 characters in body; edited title
2d
comment Should Information Security staff have Local Admin and Domain Admin Privileges
what do you mean by "Information Security"? Who or what are you referencing?