12,036 reputation
11651
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 7 months
seen yesterday

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Jul
21
reviewed No Action Needed PUT vs. POST for password update
Jul
21
comment How to use the Suricata IDS to monitor the entire network?
Is your router acting as a switch and preventing PC1 from seeing the traffic? This is not a Suricata problem, but a very basic networking design problem.
Jul
21
answered Using Free AV to meet PCI Requirement 5
Jul
21
answered Tools to make a security researchers life easier - tracking vulnerability research
Jul
21
reviewed No Action Needed HTTPS - ssl error bad cert domain
Jul
21
reviewed No Action Needed How to post comments on websites without being traced back
Jul
21
reviewed Leave Open Pivoting without meterpreter
Jul
17
comment Inspect packets coming over Linux-based bridge, and run scripts when certain conditions are met
Ettercap is used in a similar way. Is that in line with what you're looking for?
Jul
14
comment This protocol is vulnerable, but why?
I can see that Bob doesn't identify himself, Alice identifies herself and communicates the key (though hashed) to an unidentified party, who then sends it back. If Alice was communicating with Malory, Mal could spoof Bob.
Jul
14
comment What are the benefits of IP Whitelisting?
For instance, the number of probes dropped by 90% once I whitelisted by geo-ip. There is more to whitelisting than 'hiding'.
Jul
14
comment (How) Can outsiders discover the pages that are being hosted on my server?
And just like passwords, paths can be brute-forced. Crawlers use dictionary lists to try common directory names and try to map out an entire website, even if there are no links to those locations.
Jul
14
reviewed Approve suggested edit on This JavaScript code is injected on my hotel Wi-Fi: should I be worried?
Jul
14
comment Is it possible to track a missing brand new phone?
@Gilles The OP's question is how to track a phone that the OP has never had his hands on. The most that can be done is for the police to coordinate with telco's to retrieve stolen merchandise.
Jul
14
comment Order of authentication and authorization
You were authenticated as you, but not authorized to SU to that particular account. Right? You would rather be authenticated first and allow brute force attempts to log in as that user?
Jul
14
comment Is it possible to track a missing brand new phone?
Why track it? Work with the vendor to replace the missing merchandise. This is a shipping problem, not a security issue.
Jul
14
reviewed Approve suggested edit on Is it possible to track a missing brand new phone?
Jul
10
reviewed Reject suggested edit on Is “the oft-cited XKCD scheme […] no longer good advice”?
Jul
10
comment How did my network admin identify my iPhone and how can I hide my ID?
Where is the MAC/email account pairing made? I'm really not sure about this answer being accurate.
Jul
10
comment Is an Antivirus scan via network share equivalent to an offline scan of the system?
I remember references to malware moving itself to memory and off of the drive, but then writing back to drive on shutdown. I will have to look for that.
Jul
10
reviewed No Action Needed Is it safe to call an untrusted service with jquery.ajax and dataType 'jsonp'