13,025 reputation
11957
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 9 months
seen 6 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


1d
comment Where to submit collected malware from my honeypot?
as a bonus, I will link to the Anubis "how do I auto-submit" FAQ: anubis.iseclab.org/?action=faq
1d
answered Why is the *-property in BPL security model named “star”?
1d
answered Where to submit collected malware from my honeypot?
1d
revised Are there specific reasons or benefits to using a tiered information security policy architecture?
added 356 characters in body
1d
comment Are there specific reasons or benefits to using a tiered information security policy architecture?
Frankly, it's a maintainability issue. An omnibus Policy would need to be reviewed and signed off by each stakeholder all at once, and any change would need to go through the same process. By splitting it up, you can make necessary changes, even small ones, without the need to get the entire company involved.
1d
answered Any advice on how to assure patients that a medical facility is well protected against identity theft?
1d
answered Are there specific reasons or benefits to using a tiered information security policy architecture?
1d
comment What is Windows Activator or Loader
This is not a security question. Windows forums might be a better place to ask something like this.
1d
reviewed Close Using OSSEC to monitor windows services
1d
reviewed Close IPsec install pluto not finding interface
1d
reviewed Close Is it possible to use certutil to export multiple certificates from a local client machine store, to a .p7b file?
1d
reviewed Close Found security (permission) issue in website
1d
reviewed Close A paid service, library or piece of code for file upload in PHP?
1d
reviewed Reopen What is the algorithm of bcrypt?
2d
answered How safe is to secure sensitive content by URL with MD5 hash and no other authorization?
2d
comment How safe is to secure sensitive content by URL with MD5 hash and no other authorization?
You don't need to crawl through ALL combinations - you just need to find ONE that you are not authorized to access. That proves the method is broken. Because it is an MD5 hash, it is also likely the same length each time, which makes it easier to narrow in on a valid link.
2d
answered Should reverse connections be used to bypass NATs?
2d
reviewed No Action Needed How often should the DHE p and g factors be recycled?
2d
reviewed Close Closely spaced failed logins in auth.log
2d
comment Why is it a security problem not to update one's browser?
When you visit a web page, it hosts malware somewhere on the page. Your browser downloads the content and processes it, but it exploits a bug in your browser. In the background, it installs a keylogger. Now everything you type is sent to an attacker. These holes are common. Raz has a nice list.