10,013 reputation
11547
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 4 months
seen 18 hours ago

Canadian insurance company Security Manager.


Jan
21
answered How can I determine the Java version running on a remote server?
Jan
21
answered Service banner checking for vulnerabilities offline
Jan
21
answered IPSec optional advanced questions [homework] AH/ESP and Tunnel/Transport modes
Jan
21
comment Basic Security Knowledge
These are all very good questions to ask, but you haven't asked them in a way that will help us answer you.
Jan
16
reviewed Approve suggested edit on If I visit a HTTPS website when using Tor, is my IP exposed?
Jan
15
reviewed Approve suggested edit on What information can be gained from an Email Header?
Jan
15
revised What options are available for implementing DLP?
spelling
Jan
15
answered Meaning of webpage link containing www23
Jan
15
awarded  Custodian
Jan
15
reviewed Close Contents retrieved from a not protected url from content owner's server. Legal?
Jan
15
reviewed Leave Closed VCS to manipulate returned trees to prevent leaks?
Jan
14
awarded  Custodian
Jan
14
comment Security against IP Spoofing
@user2320464 Sure, but if the attacker can successfully perform an IP spoof, then they can edit a cookie to match
Jan
14
comment Security against IP Spoofing
@user1369975 the endpoint cannot do anything about a spoofed IP. The TCP/IP stack just wasn't designed for that level of integrity checking.
Jan
14
comment Security against IP Spoofing
@Anonymous I'm not upset. I'm correcting you while giving you a chance to fill-in any knowledge gaps that I might have. Fast and loose security advice hurts us all.
Jan
14
reviewed Approve suggested edit on How do i restrict network access to LAN for Visitors
Jan
14
revised Security against IP Spoofing
bad language, confirmed the IOS setting
Jan
14
comment Security against IP Spoofing
Cite your source for "IP address spoofing is quite common in many attacks..." Have you personally used loose source routing at any point? It is frequently blocked making it impossible to use as a reliable vector for attack.
Jan
13
comment Security against IP Spoofing
Also, why are you considering logging the source port of the attacker? Those will be randomly assigned anyway and of little value as a means to identify blockable targets.
Jan
13
comment Security against IP Spoofing
Why would an attacker reach your non-main ports first? Your system depends on someone reaching non-critical services before the critical ones. That's a highly specific scenario.