10,003 reputation
11547
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 4 months
seen 1 hour ago

Canadian insurance company Security Manager.


May
3
comment Why bother with attack detection?
I did not say to block all suspicious IPs, I said that there are cases where blocking an IP has to happen no matter if it is spoofed or not. And you seem to have ignored the 'interactive' malicious traffic that I mentioned. You say that you 'doubt' that reviewing IDS logs could provide valuable info to make changes to the app and infrastructure, but you do not say why. I could specify dozens of cases where I have seen this happen. You also say that stats and baselines won't help security. Are you actually asking a question here, or are you baiting?
May
3
comment Facebook user data encryption
@Piskvor yep, of course, but the OP was pretty specific. Without SSL, they could inspect the connection data and find login info. With SSL, then they need the supplementary data that you indicate.
May
2
revised Why bother with attack detection?
deleted 1 characters in body
May
2
answered Why bother with attack detection?
May
2
revised Why bother with attack detection?
added 14 characters in body
May
2
answered Logging and Metrics for DEP, EMET, and Related Mitigations
May
2
revised Is Buzzdocks a security threat?
a couple word choice changes
May
2
comment Facebook user data encryption
"given only the connection data", and not content, there would not be a way to determine which account was logged into.
May
2
revised Is Buzzdocks a security threat?
added 43 characters in body
May
2
comment Is Buzzdocks a security threat?
It looks like it comes bundled with other software.
May
2
comment Is Buzzdocks a security threat?
@Iszi my reasoning in an answer below.
May
2
answered Is Buzzdocks a security threat?
May
2
comment Is Buzzdocks a security threat?
It might not be 'malware' but it is definitely 'spyware'.
May
2
comment IP Spoofing a threat?
@jippie is correct, but you do have to make sure that your firewall rules are properly configured. Even though this risk is low in theory, you can shoot yourself in the foot in practice by improper configuration.
May
2
comment IP Spoofing a threat?
I don't think it's absurd either. I've been in similar situations. All it takes is a poor router/firewall or connection at the remote site that won't allow for VPN connections, and a year-long procurement process to get it replaced. And the OP is concerned about access, not attack.
May
2
awarded  Tag Editor
May
2
revised kali-linux wiki excerpt
added 60 characters in body
May
2
revised
added 35 characters in body
May
2
revised
added 320 characters in body
May
2
revised nmap wiki excerpt
added 44 characters in body