12,036 reputation
11651
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 7 months
seen yesterday

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Jan
14
awarded  Custodian
Jan
14
comment Security against IP Spoofing
@user2320464 Sure, but if the attacker can successfully perform an IP spoof, then they can edit a cookie to match
Jan
14
comment Security against IP Spoofing
@user1369975 the endpoint cannot do anything about a spoofed IP. The TCP/IP stack just wasn't designed for that level of integrity checking.
Jan
14
comment Security against IP Spoofing
@Anonymous I'm not upset. I'm correcting you while giving you a chance to fill-in any knowledge gaps that I might have. Fast and loose security advice hurts us all.
Jan
14
reviewed Approve suggested edit on How do i restrict network access to LAN for Visitors
Jan
14
revised Security against IP Spoofing
bad language, confirmed the IOS setting
Jan
14
comment Security against IP Spoofing
Cite your source for "IP address spoofing is quite common in many attacks..." Have you personally used loose source routing at any point? It is frequently blocked making it impossible to use as a reliable vector for attack.
Jan
13
comment Security against IP Spoofing
Also, why are you considering logging the source port of the attacker? Those will be randomly assigned anyway and of little value as a means to identify blockable targets.
Jan
13
comment Security against IP Spoofing
Why would an attacker reach your non-main ports first? Your system depends on someone reaching non-critical services before the critical ones. That's a highly specific scenario.
Jan
13
answered Security against IP Spoofing
Jan
13
comment How to find the actual address of spoofed IPs?
On what basis are you 'convinced'?
Jan
6
comment How to check if computer is controlled remotely
en.wikipedia.org/wiki/Wake-on-LAN
Jan
6
answered How to check if computer is controlled remotely
Jan
6
comment How to check if computer is controlled remotely
Unless it is set to wake up to receive commands from a controller ...
Jan
6
revised Can signature-based Antivirus detect encrypted malware?
spelling
Jan
4
comment How safe is backtrack to use?
@AviD agreed, but in this case, it isn't simply bugs, but behavior. Compromising Backtrack at the source is like trying to scratch the lens of a microscope and hoping that the technicians don't notice.
Jan
4
comment MiTM not working --rejected by router?
@user2945577 we can't help without a better description of the network configuration
Dec
31
comment MiTM not working --rejected by router?
If you aren't seeing traffic from your target in Wireshark, then you have a basic routing problem. It is possible that you are not on the target's local network. What we would need from you is a description of your network setup. What's in between your target and your attacker?
Dec
19
awarded  Pundit
Dec
19
answered How do I educate others about social engineering?