18,247 reputation
23375
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 4 months
seen 3 hours ago

Security Architect


2d
comment Can you securely allow users to create VM's on their workstations
Perhaps you need to differentiate between "Virtual Machines" and "Virtual Containers" - Virtual Machines allow you to install OS's, Virtual Containers allow you to augment the existing OS. Suddenly dropping a Windows OS into a all-Linux environment could drastically change the security of the network.
2d
comment What is the alternative tool for Honeypots?
So, my answer is: don't use a pre-programmed honeypot - use a normal server and export the logs. Any attempt to connect or use the honeypot is an incident and it is completely undetectable as a honeypot. But, from your question, I have no idea if that answer is helpful or not.
2d
comment What is the alternative tool for Honeypots?
There are many kinds of honeypots, and not all are detectable because some are simply a real server in a fake environment. Can you explain what you want a honeypot to do?
2d
revised What is the alternative tool for Honeypots?
spelling error in translation
2d
comment How is ECIES available in FIPS Validated libraries?
I'm using the language from the NIST list of "Validated Modules" of which BSAFE is one. BSAFE is a FIPS-Validated module with a non-FIPS algorithm.
2d
revised How is ECIES available in FIPS Validated libraries?
edited tags
2d
answered How is ECIES available in FIPS Validated libraries?
2d
revised Extraneus message about security risk when I open a new Chrome tab
deleted 74 characters in body; edited title
2d
comment Extraneus message about security risk when I open a new Chrome tab
Your question is a little confused: it is both a phishing technique and an indication of malware installed (likely in a Chrome extension if it went away when you switch to Firefox). Aside from that, you should have a professional look at your machine to determine if the infection was greater than just the browser. Or just nuke your computer and rebuild (you DO keep backups, right?)
2d
reviewed Close How does Silverlight protect the AES keys it gets from PlayReady?
2d
answered nmap script with credentials
2d
reviewed Leave Open How to find more details on Invalid Certificates
2d
reviewed Approve Difference in Web Language Compilation and Execution
Apr
16
reviewed Close SSL Made my Subdomain Inaccessible
Apr
16
reviewed Close EAPOL WEP Security and cracking
Apr
16
reviewed Close May .pfx file contain more than one private key?
Apr
16
reviewed Close How to keep track of registry changes in a Windows based system
Apr
16
comment How to keep track of registry changes in a Windows based system
@windowslabourer yes, you have security applications, but the primary question is an API/Windows OS internal operation question.
Apr
16
reviewed Leave Closed Decode Obfuscated Malicious PHP Code
Apr
16
comment Downloadable Autonomous System contact information
A quick Google search yielded: arin.net/resources/request/bulkwhois.html but frankly, I handle this situation by using a secondary internet connection to do a whois lookup