12,335 reputation
11654
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 8 months
seen 2 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


May
23
reviewed No Action Needed Storing KeePass database in cloud. How safe?
May
23
comment Practical ways to prevent Denial Of Service attacks
That's not 'spoofing'. It is not meant to deceive or imitate or mask. If I'm at the border and send a packet to an internal destination, that's still a direct address, albeit one that takes advantage of poor border filtering. Again, filtering is important, but only protects against a small sub-set of IP spoofing scenarios.
May
23
revised Anti-sniffer for USB
title spelling
May
23
comment Where can I find a list of checksums for windows files? Why don't MS sign all their executables?
You don't understand. Updates don't always simply replace the original files. Sometimes they modify them. You can't predict what the checksums would look like with different patch levels. That's why 'running checksums' isn't used. There can be no such stable list of checksums.
May
23
comment Practical ways to prevent Denial Of Service attacks
Then please update your question. You are mixing concepts and ideas and you need to be clear about that.
May
22
comment Where can I find a list of checksums for windows files? Why don't MS sign all their executables?
Checksums would become stale once they were patched. Different patch levels would result in different checksums.
May
22
reviewed Leave Open RESTful web service and SSL certificate
May
22
reviewed No Action Needed How are ProtonMail keys distributed?
May
22
reviewed Approve suggested edit on What's to stop someone from 3D print cloning a key?
May
22
reviewed No Action Needed Sending passwords to someone remotely
May
22
reviewed Leave Open Bluetooth Peripheral Vulnerabilities
May
22
answered process/program execution anomalies
May
22
comment process/program execution anomalies
When you say "how could I know", do you mean how could an expert know, or how could an average user know?
May
22
revised Syllabus for self-studying information security and Pentesting
tags
May
21
answered BigDump v0.35b vulnerability
May
21
comment Practical ways to prevent Denial Of Service attacks
How do you 'spoof' a destination address? Spoofing my neighbor's address is of high value when I want to DoS an asset and not have it be traced to me in the logs. Reflection attacks are also a handy use of spoofing.
May
21
reviewed Leave Open Do software systems become more secure every year?
May
21
comment Enforcing password change
@blended "Not correct" is overreaching. It is a correct procedure. Your concern is about validating the user, which is easily done on the 'change password page' that Steven mentioned.
May
21
comment Do software systems become more secure every year?
Do you have a source for the idea that software is becoming more secure every year? As Tom answered, there are more and more users, and there are more and more new developers every year who need to learn how to develop securely...
May
21
revised How to find a reliable private mail drop or ghost address provider? (Not CMRA)
deleted 96 characters in body