14,609 reputation
12463
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 11 months
seen 12 hours ago

Security Architect

Owner of: SelfPhish.com


Nov
16
comment Old e-mail text types itself back into PC later by itself?
MS Security Essentials is not a reliable AV solution. Even Microsoft advises to add another AV on top of Essentials. You can get free AV scanners and Live CD's.
Nov
16
reviewed Leave Open SQL Injection if table structure/db structure not known
Nov
14
comment Masking IP address and port number for Web application
DNS works for IP, ports are not a consideration. Do you want to mask the port, or are you worried that by using port 89 that DNS won't work?
Nov
13
comment Is Adblock (Plus) a security risk?
At best this is anecdotal evidence. Are you sure that you installed The real AdblockPlus from adblockplus.org? This isn't really an answer (yet).
Nov
13
comment Finding Plaintext Password Repositories
You would need to have some common thing to search for. I'm not sure there would be in this case. Your stated goal is to find files that could contain any kind of data: usernames and passwords, which would be unique between people by definition. At best, search for files labeled "passwords".
Nov
13
reviewed Close In a browser web server communication, who decides which encryption protocol to use
Nov
13
comment Data Abstraction Layers in Forensic Imaging
I'm not sure this answer address the question.
Nov
13
revised iMac Keylogger and other hacks
deleted 22 characters in body
Nov
13
comment Proper way to allow access to systems within different offices?
The other problem the OP has is that there is no direct connection to the target from the remote user. It's not an authentication problem, but a logical access one.
Nov
13
comment Proper way to allow access to systems within different offices?
"Trivial" to spoof IPs while actively connected? Can you provide evidence of this?
Nov
13
comment Proper way to allow access to systems within different offices?
Ok - then your scenario is far simpler than you laid out. Unfortunately, it's simple VLAN pain that you either need to re-architect to permit the reality that remote users need access, or to pivot users once they have VLAN access.
Nov
13
comment What role does clock synchronization play in SSL communcation
@cpast Yes, POODLE works on live streams only and not recorded packets. I'm fighting a cold, so I might just delete this whole answer. It's clear to me, but I seem to be unable to articulate.
Nov
13
comment Viruses From Email Attachments
So, you want to safely transfer malware from your work machine to your home?
Nov
13
comment Viruses From Email Attachments
So, your question boils down to: how to safely download malware for analysis?
Nov
13
comment Proper way to allow access to systems within different offices?
After your edit, things still aren't clear. If they have VPN access, why is the firewall still an issue? Authenticate the user, not the IP.
Nov
13
comment What role does clock synchronization play in SSL communcation
@cpast I might need to edit to show that modification is an option. As for SSL being secure, have you heard about POODLE?
Nov
13
comment What role does clock synchronization play in SSL communcation
Can an hour or 2 difference between client clock and reality cause this breakage? Or how much does the client need to drift for it to be a problem?
Nov
13
comment What role does clock synchronization play in SSL communcation
@ThomasPornin I wasn't just thinking about SSL, but things like REST and authentication schemes where timestamps are useful for protecting against replay.
Nov
13
answered What role does clock synchronization play in SSL communcation
Nov
13
comment Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?
I wanted to answer with the "USB Condom", but didn't realize they changed their name. It's a simple adapter that does not connect the data pins.