18,513 reputation
23375
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 4 months
seen 2 hours ago

Security Architect


Apr
22
comment Processes and tools for identifying security vulnerabilities
You're asking about threat modelling?
Apr
22
revised look to crack email account password (server uses LDAP/Kerberos )
edited body; edited title
Apr
22
comment look to crack email account password (server uses LDAP/Kerberos )
Do you own or administer the email server?
Apr
22
comment look to crack email account password (server uses LDAP/Kerberos )
We are not a hacking site.
Apr
22
reviewed Close Can a client certificate be revoked and reissued with the same name in OpenVpn?
Apr
22
reviewed Close John The Ripper error: No charset defined for mode: ASCII
Apr
22
reviewed Leave Open The Perfect Mousetrap - Can a sandbox system be designed such that it's identical to an actual computer?
Apr
22
reviewed Close Why don't we reward users who choose strong passwords?
Apr
22
comment Why don't we reward users who choose strong passwords?
Frankly, it's not the web/service's job to make the user choose something more secure. If your password policy allows for weaker passwords, then you must allow the weaker passwords. The web/service can encourage and inform, but not do the risk assessment for each person.
Apr
22
reviewed Close Is CSP enough to prevent XSS attacks
Apr
22
reviewed Close What are the risks of file server access over wireless?
Apr
22
reviewed Close Why Armitage nmap results differs from msfconsole ones?
Apr
22
reviewed Reviewed Can owasp-zap be configured to use a proxy?
Apr
22
reviewed Reject Why can't you work backwards with public key to decrypt a message?
Apr
22
reviewed Leave Closed SAD storage prior to authorization
Apr
22
comment What are the main differences between a Metasploit vulnerability/exploit attack and a “R.A.T.” attack?
@Nick Metasploit, in almost ALL cases, does not require user interaction. Yes, it includes functionality that can require user interaction, but the whole point of Metasploit is to discover and exploit vulnerabilities without user interaction. The whole idea is to be able to run code on the remote machine directly without the user knowing. A RAT is a payload.
Apr
22
revised Is there mobile app for encryption a voice thru the common gsm call?
deleted 170 characters in body
Apr
22
comment Is there mobile app for encryption a voice thru the common gsm call?
There are apps that do that. Please use Google for "encrypt cell phone calls"
Apr
22
answered What are the main differences between a Metasploit vulnerability/exploit attack and a “R.A.T.” attack?
Apr
22
revised What type of attack is this?
added 12 characters in body