19,649 reputation
33677
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 5 months
seen 5 mins ago

Security Architect


Mar
31
revised Identify the attestation certificate (X.509) in Fido U2F registration response
link, formatting, spelling
Mar
31
comment Vmware over unsecure os
To sum my concerns: Red Pill doesn't exist. Blue Pill doesn't apply to the question.
Mar
31
reviewed No Action Needed How to find a reliable private mail drop or ghost address provider? (Not CMRA)
Mar
31
comment How to analyze spam email URLs to detect exploits?
This is great info, but I'm not sure that the OP was confused about what the URLs were (used curl on them).
Mar
31
comment Is there anyway to easily decipher this virus code?
ok, then what about the code do you need deciphered?
Mar
30
revised Vmware over unsecure os
added 2 characters in body
Mar
30
comment How can MITM be performed in WebRTC?
Can you provide the source to the statement that certificates are self-signed?
Mar
30
revised How can MITM be performed in WebRTC?
added 49 characters in body; edited title
Mar
30
comment How can MITM be performed in WebRTC?
This is a question for the WebRTC devs.
Mar
30
comment Is it necessary to protect ATM pins against malware that has no access to the physical card?
The article itself explains that it's not just the PIN but the card number, too, along with the bank you use and your account information. In some cases, with this info they can create a physical card.
Mar
30
comment How to use SSL approach at the application level
why not simply use TLS in the application?
Mar
30
comment Need some docs that say we shouldn't upper the string when saving it as a password
@FelipeM By changing a password to upper, you fundamentally change the password. There is not going to be a doc that says not to do this. By switching to upper(), you might as well change "testpassword123" and every other submitted password into "password" and there won't be a doc that tell you not to do that, either. Sure, the practical reason is about reducing complexity, but the basic principle is to not change the password submitted. The reasons why are inherently obvious.
Mar
30
reviewed Close How can I spoof source ip address while making a ping request from windows command prompt?
Mar
29
comment Best practices for encryption from web<-> specific client
I'm also confused about why you are encrypting the data again within an SSL stream.
Mar
29
comment Best practices for encryption from web<-> specific client
within what limitation? are the 6 steps the limitation or the thing you want to improve?
Mar
29
reviewed Approve Flash ignores Content-Type header, allowing XSS?
Mar
27
comment What kind of backdoor can be made after hacking wi-fi?
difficult or not, the problem remains that the only way to do what you want is to either reconfigure the router or exploit an install malware
Mar
27
revised Are there any alternatives to EFS for transparently encrypting the contents of a folder in Windows?
added 1 character in body
Mar
27
comment Are there any alternatives to EFS for transparently encrypting the contents of a folder in Windows?
your title says to encrypt a folder, but the body says the entire drive - which are you looking for?
Mar
27
comment What kind of backdoor can be made after hacking wi-fi?
Most routers have some kind of setting that allows access to the admin login page from the WAN interface (Internet). Turn this on, and you have access to the router. As for installing exploits, that would really depend on the router.