17,640 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 3 months
seen 59 mins ago

Security Architect


Mar
22
reviewed No Action Needed XSS via REQUEST_URI
Mar
22
comment Server Files Got Exposed, What Security Steps Should I Take?
thanks @ǝɲǝɲbρɯͽ I made the additional flag about the cross-post
Mar
22
comment Server Files Got Exposed, What Security Steps Should I Take?
@user2662398 please don't cross-post on stackexchange
Mar
22
comment Server Files Got Exposed, What Security Steps Should I Take?
@user2662398 if he has your passwords, that means he can log in - making it compromised.
Mar
22
comment Server Files Got Exposed, What Security Steps Should I Take?
Without knowing a lot more about your configs or server setup, we can only assume that if the password was saved in a file, that the attacker has it.
Mar
22
comment Server Files Got Exposed, What Security Steps Should I Take?
We are not going to review the security of your code. Change all passwords, and blow away this server and rebuild from backup.
Mar
22
answered Server Files Got Exposed, What Security Steps Should I Take?
Mar
22
comment What is the mechanism used by the ISP to avoid DoS attacks?
ISPs, Public networks, and home networks all have vastly different scope and resources to address DoS attacks. As for ISPs, there are many different techniques that are used, making this question too broad to answer.
Mar
22
revised What is the mechanism used by the ISP to avoid DoS attacks?
deleted 4 characters in body; edited title
Mar
22
comment A person knows my IP address: how to save my data and address?
@Mast Same here in Canada. No change in IP since I got my account, even after moving twice.
Mar
22
comment non-https winscp website
For #1, we cannot answer for the admins at the WinSCP site.
Mar
22
comment What legal protection is afforded for email in transit?
First, you would need to verify that non-delivered emails have less legal protection before we could respond.
Mar
22
comment How should I manage people/technicians during an incident/outbreak?
I love that you have these references, but your answer boils down to only links to resources. Can you expound a little on what the references are talking about? Talk about the basics of setting up a CSIRT?
Mar
22
reviewed Close Splitting data between wifi networks for security
Mar
22
comment How to protect from caller-id spoofing?
Agreed. Caller-ID is a convenience, not an authentication method.
Mar
21
comment What are some of the primary ways that people's privacy is protected from Big Data?
German and US law have vast differences on what can/can't be collected or disclosed, for one example. I think you need to refine your question. Are you asking, "do website operators follow the law?"
Mar
21
comment What are some of the primary ways that people's privacy is protected from Big Data?
"Internet Policies"? What are those?
Mar
20
revised A person knows my IP address: how to save my data and address?
added 8 characters in body; edited title
Mar
20
comment Is PIN-protected token with login certificate a two-factor authentication if the token is controlled solely by the user?
What do you mean by "PIN-protected token"? By my understanding of your question, I would say that it is indeed 2FA.
Mar
20
reviewed Approve Firefox stopped working with our app after 36.0.1