13,630 reputation
12060
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 10 months
seen 1 hour ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Jul
8
revised Physical vs Logical - Location/Address
link
Jul
8
revised Issues with format of Logs generated by Auditd
added 2 characters in body
Jul
8
revised Issues with format of Logs generated by Auditd
formatting
Jul
8
comment Why do sandboxing environments not rely on antivirus programs?
Didn't you answer your own question? Anti-virus can be defeated by changing the behavior of the malware. Sandboxes exist to supplement anti-virus by analyzing the behavior, and not the code.
Jul
8
revised Why do sandboxing environments not rely on antivirus programs?
spelling
Jul
8
revised Why does the router fall when performing ARP Poisoning?
re-wording
Jul
8
comment Why does the router fall when performing ARP Poisoning?
What do you mean by "the router falls"? What do you expect it to do?
Jul
8
reviewed Leave Open Why does printf() vulnerability require 4-bytes of junk data? - “Hacking: The Art of Exploitation”
Jul
8
reviewed Looks OK Testing SQL injection using sqlmap
Jul
8
comment Testing SQL injection using sqlmap
This doesn't add any more than what the accepted answer provides.
Jul
8
comment Generic error message for wrong password or username - is this really helpful?
Attackers tend to brute force accounts in order to get the data of THAT account, not to simply gain access to a system. You are raising points that are designed to be dismissed.
Jul
8
reviewed No Action Needed Publicly Available API + Sensitive ID/Key Transmission Over HTTP
Jul
8
comment Generic error message for wrong password or username - is this really helpful?
This answer is nonsensical. How would creating a new user do anything? Why did you raise a 'straw man' with point #2?
Jul
8
reviewed No Action Needed DMZ Firewall settings
Jul
8
comment Bypassing Trustwave NAC
I have a similar product and I haven't found a way around it. I have been curious to try to 'freeze' my ARP tables so that I am not affected by the ARP poisoning techniques it uses.
Jul
7
comment Substitute Key on 128 Bit Encryption
This program encrypts/decrypts anything you feed it, always using the same key?
Jul
7
answered Substitute Key on 128 Bit Encryption
Jul
7
reviewed No Action Needed Substitute Key on 128 Bit Encryption
Jul
7
reviewed Reject suggested edit on How can the OpenSSL CCS Injection vulnerability (CVE-2014-0224) be exploited?
Jul
7
reviewed No Action Needed Generic error message for wrong password or username - is this really helpful?