18,231 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 4 months
seen 19 mins ago

Security Architect


37m
comment Url quote escape (whenever I place a quote in the url, it escape it with '/)
we would need to know more about the server and how it escapes it - do you have access to the server?
38m
comment How do I allow for anonymous encryption?
I think that you are trying to battle different problems on different layers of the communication stack. You need to separate those problems and deal with them differently. Perhaps you need to explain what problem you are trying to solve?
48m
comment How do I allow for anonymous encryption?
How are you managing the navigation, selection, and routing of the hops? What does the "hopping" add to the security of the message? If Bob uses the target's public key, how could a node in the chain replace it? How are you hoping to improve on the basic TLS protocol?
55m
comment What is the alternative tool for Honeypots?
I'm not even sure what you described falls under the definition of "honeypot". I'd be delighted to be corrected on this one, though. Even if it is, I'm not sure it answers the question, and the OP specifically mentions network-based honeypots.
3h
reviewed Close Should I be afraid of biometric IDs?
3h
comment How do dissidents use Tor?
Please make sure you use proper syntax when answering.
3h
reviewed Edit How do dissidents use Tor?
3h
revised How do dissidents use Tor?
deleted 70 characters in body
4h
reviewed Close ISO27001 Certification - Business Incident
5h
comment What is the alternative tool for Honeypots?
I'm not sure that what you are describing is a honeypot. Certainly not the type of honeypot the OP is talking about.
5h
comment A local IP address (RFC 1918) on my network that is not … local ..
Too many things that it could be, and we are not a network troubleshooting forum. Interesting puzzle, though.
5h
comment Has anyone used this ICLOAK USB device?
Ah, thanks for evidence. One thing, tho: How is Tails on a USB drive different? I simply don't see a basis for your claim that they are "fooling naive customers". There is the firmware vector that they cannot account for (no one could), but you yourself suggested that the probability was low and the hardware limitations are real. I still don't see the basis for such a scathing critique.
6h
comment Has anyone used this ICLOAK USB device?
I'm not defending the product, but I think you are overreaching in your critique. 1) I'm not seeing claims of being a "silver bullet", merely the "best available". 2) Yes, an encrypted stream might be detected, but that does not defeat privacy or anonymity. 3) They, themselves, advocate installing Tails on a USB stick. 4) Can you provide evidence of firmware eavesdropping that survives rebooting to an attached USB drive? If you can reboot the machine and trigger booting to USB, you do have a lot of control over the machine.
6h
comment Can you securely allow users to create VM's on their workstations
Perhaps you need to differentiate between "Virtual Machines" and "Virtual Containers" - Virtual Machines allow you to install OS's, Virtual Containers allow you to augment the existing OS. Suddenly dropping a Windows OS into a all-Linux environment could drastically change the security of the network.
6h
comment What is the alternative tool for Honeypots?
So, my answer is: don't use a pre-programmed honeypot - use a normal server and export the logs. Any attempt to connect or use the honeypot is an incident and it is completely undetectable as a honeypot. But, from your question, I have no idea if that answer is helpful or not.
7h
comment What is the alternative tool for Honeypots?
There are many kinds of honeypots, and not all are detectable because some are simply a real server in a fake environment. Can you explain what you want a honeypot to do?
7h
revised What is the alternative tool for Honeypots?
spelling error in translation
8h
comment How is ECIES available in FIPS Validated libraries?
I'm using the language from the NIST list of "Validated Modules" of which BSAFE is one. BSAFE is a FIPS-Validated module with a non-FIPS algorithm.
8h
revised How is ECIES available in FIPS Validated libraries?
edited tags
9h
answered How is ECIES available in FIPS Validated libraries?