22,939 reputation
54789
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 8 months
seen 4 hours ago

Security Architect


Jul
14
reviewed Leave Open Server based pdf signing using etoken from a client browser
Jul
14
reviewed Approve My Ipv6 is under attack by the smurf6?
Jul
14
reviewed Approve DNSSec (Comcast) vs DNSCurve (OpenDNS)
Jul
14
reviewed Leave Open Trusted vulnerability database source
Jul
14
revised authentication model using oAuth
deleted 13 characters in body
Jul
14
answered Trusted vulnerability database source
Jul
14
revised Trusted vulnerability database source
deleted 4 characters in body
Jul
14
revised Is it possible to take over the victim's system only by DNS attacks?
language
Jul
14
revised Is it possible to take over the victim's system only by DNS attacks?
deleted 14 characters in body
Jul
13
comment Proxy Firewalls, Content Inspection, Application Layer Firewalls & Web Application Firewalls
It's all about the placement (client or server side) and what's being inspected.
Jul
13
revised How much of a security problem is PHP's proc_open() on a shared host
added 5 characters in body
Jul
13
comment Ways to prevent traffic injection by ISP
It will be hard for us to guess what your ISP might have as a policy.
Jul
13
wiki
Jul
13
awarded  Caucus
Jul
13
comment Sqlmap trimming output
What about reviewing the packet trace to see if the full data is being returned? There is a chance that the webserver is trimming it, too.
Jul
13
comment dns reflection attack vs dns amplification attack
Your second definition explains the difference quite succinctly. It is possible to reflect without amplification. Amplification is simply large volume of reflections.
Jul
13
reviewed Edit dns reflection attack vs dns amplification attack
Jul
13
revised dns reflection attack vs dns amplification attack
deleted 13 characters in body
Jul
13
reviewed Approve Password rules: Should I disallow “leetspeak” dictionary passwords like XKCD's Tr0ub4dor&3
Jul
13
comment Password rules: Should I disallow “leetspeak” dictionary passwords like XKCD's Tr0ub4dor&3
@MichealJohnson absolutely not. I have read NUMEROUS sources of advice that overtly suggest using leet to increase the complexity of their passwords. This answer is a very unusual opinion.