7,574 reputation
11037
bio website
location Canada
age
visits member for 1 year, 5 months
seen 4 hours ago
stats profile views 342

Canadian insurance company Security Manager.


2d
comment Becoming a malware analyst?
I guess someone didn't like my "you don't need a degree" comment ...
2d
answered Becoming a malware analyst?
May
16
comment Which is the most popular one time password based authentication scheme?
One answer is RSA's SecureID, but that's 'popular' by volume and recognizability. The question is far too vague as well as intended for an unknown application. As such, the question is not a good fit. Re-word or refine it so that we can better help you.
May
16
answered Security comparisons between two approaches: how to distinguish FUD from Substance?
May
16
comment Security comparisons between two approaches: how to distinguish FUD from Substance?
'Conceptual' not 'Meta'
May
16
comment Vulnerability testing without the use of exploits?
If you can only determine your vulnerability by testing, then this is the way to go. Otherwise, check version numbers, etc. instead.
May
16
answered Commonly observed attack patterns modelled in Honeypot configurations
May
16
comment Commonly observed attack patterns modelled in Honeypot configurations
Honeypots do all this, but they do not cover global data or attempts on real assets.
May
16
comment How to secure a script that generates an HTML file from other websites?
The problem is defining and recognizing 'bad' in context. I'm afraid you've asked a question without an answer. Refine it and add some specifics.
May
15
revised Password storing in Google Chrome content scripts
edited body; edited title
May
15
revised w3af plugin development example
added 1 characters in body
May
15
answered w3af plugin development example
May
15
comment w3af plugin development example
Welcome to IT Security. That's an awfully specific question about a specific piece of software and therefore not a great fit for the site. Try hitting up the github repo for the answers you seek.
May
15
comment Data needed for why not to load third party JavaScript on web page with credit card form
As a 3rd party provider, you can't be responsible for client security beyond your own code base. Pushing your company and theirs into territory that is not your direct responsibility is going to be tough at best, and the fruits of your efforts undefined. You are at the wrong spot to have any leverage, and the leverage you do have is small, even if you were in the right spot. In terms of 'picking your fights', I would advise looking for better fights.
May
15
answered Data needed for why not to load third party JavaScript on web page with credit card form
May
14
comment Securing my firewall (both dedicated and iptables-based)
Even the most secure firewalls have to allow traffic to a service running on a computer. Once access is allowed, then an attacker can find a way in by attacking the service itself. Firewalls only limit the amount of access an attacker has.
May
14
revised Database connection from front end
wording
May
13
revised What are the security risks of pirating video or music?
stenography fix
May
9
comment Linux Runtime Memory protection
Is mprotect() the kind of thing you are looking for?
May
9
revised Linux Runtime Memory protection
added 35 characters in body