meta user
network profile
| bio | website | |
|---|---|---|
| location | Canada | |
| age | ||
| visits | member for | 1 year, 6 months |
| seen | 7 hours ago | |
| stats | profile views | 372 |
Canadian insurance company Security Manager.
|
Mar 27 |
revised |
What, specifically, does the Windows Firewall do? added 4 characters in body |
|
Mar 27 |
revised |
Is it possible to turn a computer into a bomb? spelling errors |
|
Mar 27 |
answered | Kernel Intrusion on home broadband router - what does it mean? |
|
Mar 27 |
comment |
Kernel Intrusion on home broadband router - what does it mean? What is your router? A linux box or an appliance (linksys, d-link, etc.)? |
|
Mar 27 |
suggested | suggested edit on Is it possible to turn a computer into a bomb? |
|
Mar 27 |
comment |
Email forgotten password or send reset link, both just as insecure? Thanks for asking. This is an open question with a client of mine. I still think that announcing to your users that you store their passwords in a recoverable form (plaintext or encrypted) opens up a liability for the company, because the user has proof that anyone from the company (at least) could have compromised their account with a valid login. |
|
Mar 27 |
answered | What, specifically, does the Windows Firewall do? |
|
Mar 27 |
comment |
What, specifically, does the Windows Firewall do? If you have a more liberal interpretation of the term 'open', he's not THAT far off. And if he's referencing 'Windows Firewall', then he might be thinking of a host firewall. |
|
Mar 27 |
answered | Why are PDFs less secure than other document formats? |
|
Mar 26 |
revised |
Is there any reason to show the same message for invalid username as password? deleted 8 characters in body |
|
Mar 26 |
comment |
VirtualBox Pen Test Lab Setup He will also have to enable 'promiscuous mode' on the snort nic in the manager to sniff packets |
|
Mar 26 |
comment |
How can I fuzz standalone applications? You want to do application (not web) fuzz testing and want to learn how? Fuzz testing requires an external input, and filenames tend to be the most common vector for that in applications, and web apps have multiple possible external inputs, as you know. |
|
Mar 26 |
answered | Is there any reason to show the same message for invalid username as password? |
|
Mar 22 |
comment |
Is there a Snort rule that equates to “something suspicious flagged from a client side application?” I don't think there could be. There is no standard for error messages above layer 4, so you would have to write your own and grep through the data. The definition of 'fishy' would be application-dependent and not common between applications. |
|
Mar 22 |
answered | Is there a Snort rule that equates to “something suspicious flagged from a client side application?” |
|
Mar 19 |
revised |
What “hacking” competitions/challenges exist? spelling |
|
Mar 19 |
answered | Deploying vulnerable web application online |
|
Mar 19 |
comment |
Security Training for corporate Facebook users Yes, your points make sense, and I had already considered that anyone at any time could use their personal devices to say anything about anything at any time, but the burring of the lines between work and personal by using the same device within moments of doing work means there is not the inherent mental barrier between those two domains. Hence, I believe there is a greater risk of accidental disclosures. Intentional disclosures will occur regardless of legal clauses. I want to find an effective measure to create that barrier while permitting access. |
|
Mar 15 |
comment |
If you could have only one book on web security, what would it be? second edition available |
|
Mar 15 |
revised |
What is the best tool to anonymize your scans (network/ports)? grammar and capitalization |
