19,709 reputation
33677
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 5 months
seen 10 hours ago

Security Architect


Apr
11
revised Stuxnet - The background functions
edited title
Apr
11
reviewed Leave Open Generating x509 PEM files for testing PEM parser
Apr
11
revised Relationship between HTTPS and SSH Public Keys
formatting
Apr
11
comment Decentralized e-commerce site, what to do about SSL/security?
@ifm The cost to that plan is getting a wildcard cert, which is pricey.
Apr
11
comment Official proof (document) that Linux is safer and faster than Windows
@hft I think there might be a language quirk there: "convinced they have to pay a licence for" could also mean that they are convinced they they must always pay to obtain the ability to use an OS (which is not the case for Linux).
Apr
10
comment Decentralized e-commerce site, what to do about SSL/security?
@AronFoster I completely agree - but the fact remains that secure http connections cannot be enforced by the person writing the webpage to be distributed. And, as I point out - it's the sellers who would be most interested in the secure connections (due to issues you point out): the developer can only do so much.
Apr
10
reviewed Leave Open What is the “segment size” when using Cipher FeedBack (CFB) chaining mode?
Apr
10
reviewed Leave Open Decentralized e-commerce site, what to do about SSL/security?
Apr
10
reviewed No Action Needed Is there a nmap command to get the top # most common ports?
Apr
10
revised Decentralized e-commerce site, what to do about SSL/security?
clean-up
Apr
10
comment Decentralized e-commerce site, what to do about SSL/security?
You cannot force security on your sellers - each one is going to have to be responsible for their own store. This is why services like Amazon exist: to take care of these infrastructure problems for the vendors. Can I ask why you require the requests to be encrypted?
Apr
10
answered Is Great Cannon essentially a JavaScript injection attack?
Apr
10
revised HTTPS icon red and crossed out - Chrome browser
deleted 14 characters in body; edited tags; edited title
Apr
10
comment Are there any anti-virus programs that have a bot that clicks email links?
There are email clients that will follow links to inspect them before displaying them to the user. What client is being used? What email server is being used? How are you determining that the links have been clicked? You provide very few details for us to help you.
Apr
10
answered Official proof (document) that Linux is safer and faster than Windows
Apr
10
reviewed Close HTTPS icon red and crossed out - Chrome browser
Apr
10
reviewed Leave Open What does working in cybersecurity look like?
Apr
10
reviewed Reopen Monitoring Active Directory Domain Administrator Activities
Apr
10
reviewed Approve xxe tag wiki
Apr
10
reviewed Close Can I save passwords in my app securely and retrieve them without asking for a master password?