14,040 reputation
12162
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 11 months
seen 8 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


8h
awarded  Nice Answer
10h
comment How to report vulnerabilities without being regarded as a hacker?
I've tried to verify my memory, but perhaps the discussion was more relevant long ago. The legal theory fell under the scope of "viewing the code" without allowing the 'compiler' (the browser) to render it, and thereby was considered "unauthorized access". At this point, I cannot find evidence that capturing your own packets to a server over the Internet is illegal.
15h
reviewed Approve suggested edit on Why use a Smartcard for (Two Factor) Auth instead of another medium?
15h
comment How to report vulnerabilities without being regarded as a hacker?
@AJHenderson I completely understand, but the OP mentioned that he ran Wireshark and that seems to be the thrust of his concern about being perceived as a 'hacker'. He can, of course, simply mention that the protocol is incorrect, but to 'prove' it by showing his credentials in the clear in a packet dump can, potentially, cause some people some concern.
16h
answered Why use a Smartcard for (Two Factor) Auth instead of another medium?
16h
comment Sticky keys on RDP
The author does not explain themselves, so it is a little difficult to answer your question about how they did it.
16h
reviewed Close Can I create a fake AP with my wireless card?
16h
reviewed Leave Open Are there any good tools to test the encryption quality of data?
16h
reviewed Leave Open Why are drives overwritten three times when being disposed of?
16h
reviewed Leave Closed Example websites that have invalid certificates
16h
comment How to report vulnerabilities without being regarded as a hacker?
If the "legal action/traction" assertion: the OP is from Canada, and I can assure you from personal experience, that legal action would only be taken seriously if there was actual loss (i.e. an actual compromise). The general public threatening lawsuits where there is no loss is regarded as noise.
16h
awarded  Nice Answer
16h
comment How to report vulnerabilities without being regarded as a hacker?
I made 2 assertions, which would you like evidence of?
1d
reviewed Close nginx poodle fix configuration
1d
reviewed Approve suggested edit on Will an ISP give out network/traffic info upon request?
1d
comment Is there any defense against Brute-Force done on a local encrypted file?
unless your first guess happened to be the correct one ....
1d
revised What is the point of JSON Web Token?
added 17 characters in body
1d
answered Is there any defense against Brute-Force done on a local encrypted file?
1d
reviewed Reviewed What is the point of JSON Web Token?
1d
comment Trust level of whole disk encryption software
Love the abacus, but you can perform acoustic analysis on the clacking and determine the calculations made :)