21,059 reputation
33982
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 2 hours ago

Security Architect


Jul
4
comment Is there any way track a Andriod phone using IMEI Number
That's something for your phone company to tackle.
Jul
4
revised Is there any way track a Andriod phone using IMEI Number
deleted 11 characters in body
Jul
4
reviewed Approve Is there any way track a Andriod phone using IMEI Number
Jul
4
comment Metasploit payload problem
Spend some time looking up "TCP/IP" for beginners. It's a huge topic, but hopefully you can find some light material to trigger some thoughts.
Jul
4
comment LastPass authentication grid hacked on June 15?
@Craig I'm not sure what you disagree with. I agree with all your statements, but your comments highlight the need for understanding context. All of your proposed attack vectors require physical access to the 2nd factor. If someone steals your phone, then all bets are off, no matter how strong your password is. Using a phone as a second factor mitigates the threat of a remote treat actor.
Jul
4
comment Metasploit payload problem
Dude, you're sticking your key in your house's door lock and wondering why the car isn't starting. It's not about distance, it's about having a connection. 192.186.* is a private address and doesn't work over the Internet. You need a direct connection, an external IP, and port forwarding on your router. And no, I'm not going to explain that. You are on the wrong forum for the help you need.
Jul
4
comment What are the security benefits to block all http referer header requests for web browser?
possible duplicate of Does the practice of blocking an off-site "Referer:" HTTP requests improve website security?
Jul
4
revised What are the security benefits to block all http referer header requests for web browser?
deleted 1 character in body; edited tags; edited title
Jul
4
comment Metasploit payload problem
Ok, you need to take a big step backwards from this. You are missing a lot of critical knowledge for any of this to work. First step, you need to learn basic networking. Your questions are the equivalent of wanting to know what exit to get off on to get to a city 200km away, but you don't know what a car ignition key looks like. I could tell you what the exit number is, but you need to get your license first.
Jul
4
comment Metasploit payload problem
In order for the meterpreter to send back a session the target computer and yours need a network connection!! Your VM is behind a heck of a lot of layers. She can't get to your computer. What IP did you put in the meterpreter settings as the LHOST?
Jul
4
comment LastPass authentication grid hacked on June 15?
@Craig saying "no" is far too simple a response. Passwords (and their complexity) and 2FA exist to address risks from threat actors. It is perfectly reasonable to allow simple passwords when you have 2FA, depending on the risks involved. In some cases, you're correct, the risk is still too high, but you need to understand the elements of the risk and the threat actors.
Jul
4
comment Metasploit payload problem
You need to describe the networking between the VM and your friend's computer. Does your VM have network access to your target? Can you ping it? Can it ping you? Do you have proof that it ran at all on your friend's computer?
Jul
4
revised Metasploit payload problem
deleted 67 characters in body; edited tags; edited title
Jul
4
comment Metasploit payload problem
Please differentiate between the Linux distro you're using and Metasploit, which is a completely independent program from Linux.
Jul
4
comment When did development on various TLS versions begin?
Cool. For completeness sake, I'd list both the 'development start date' and the 'release date'. That will make the question more clear.
Jul
4
reviewed Close a pdf that is really a zip with a pdf inside?
Jul
4
comment a pdf that is really a zip with a pdf inside?
First, it is not a pdf file, but a zip file with a renamed extension. Second, your question boils down to, "how do I get the password to a password-protected zip?" Answer: Ask the one who set the password. Otherwise, we are not a hacking site.
Jul
4
reviewed Close Reformatting drive from a GUID partition to an MBR partition
Jul
4
comment What are some or all the security compliances?
Any question that says, "List all x" is too broad for this site.
Jul
4
comment When did development on various TLS versions begin?
Nothing is going to be official in terms of "I started thinking about improving the current spec around ...." aside from anecdotal evidence. I'm really not sure that you will find what you are looking for. Can I ask why you are looking for this or what you will use the data for?