17,660 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 3 months
seen 24 mins ago

Security Architect


49m
reviewed Close SQL Injection in a Web Service URL as a Parameter Value
3h
reviewed Close FTPS vs SFTP on Windows server 2008 R2
3h
comment What's the absolute most secure boot environment for “doing taxes” in the browser?
Once you create the requirement to use a browser, you create a lot of uncertainty. Use paper/pen for the "most overkill" security.
6h
reviewed Close Building a password recovery algorithm
6h
comment Are there any vulnerabilities specific to Kali Linux?
This question is off-topic here. A Kali forum or SuperUser would be a better fit. Aside from that, all software and OSes can end up with vulnerabilities that need to be patched. Kali isn't supposed to be a non-vulnerable OS, it's simply an attack platform.
7h
revised Digital Certificate Repository Integrity
deleted 105 characters in body; edited title
9h
comment To who does Facebook sell your personal data
Regulations vary by jurisdictions.
9h
comment Determine OS of the target using Greenbone Security Assistant
@Mitsos the "OS Fingerprint" section provides what you need: "FreeBSD"
9h
reviewed Approve I just found many facebook entries on my registry?
10h
revised Vmware over unsecure os
included details from comment
10h
comment Determine OS of the target using Greenbone Security Assistant
Do you want to know how to do it in general or with that specific tool? If you only want to do it with the tool, you'll have to contact their support.
10h
reviewed No Action Needed Determine OS of the target using Greenbone Security Assistant
10h
reviewed Leave Open Does any OpenID identity provider allow site-unique arbitrary email addresses?
11h
comment Mitigating DDOS in P2P systems
The problem with DDoS is that you need control over multiple routes of entry. With a single end user, the solution is to contact your ISP to ask them to handle the problem: they have the tools to help.
12h
comment Identify the attestation certificate (X.509) in Fido U2F registration response
it looks like you simply need a x.509 parser - you will have to look for one in the language you are using
12h
comment FTPS vs SFTP on Windows server 2008 R2
The question is always about "security vs usability". You will have to balance your need for encrypted logins/data transfer and the requirements on the client side. For what it is worth, SFTP is a pretty standard replacement for FTP and you should justify the need to use FTP instead of justifying the use of SFTP.
12h
reviewed Close What kind of security requirements are necessary to store/display SSN in a web app?
12h
reviewed Close UDP Traffic is blocked
12h
reviewed Edit Identify the attestation certificate (X.509) in Fido U2F registration response
12h
revised Identify the attestation certificate (X.509) in Fido U2F registration response
link, formatting, spelling