20,897 reputation
33981
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 1 hour ago

Security Architect


Jun
25
comment Ghost CMS abnormal access
Perhaps, is that what happened?
Jun
25
reviewed No Action Needed output from CryptGenRandom
Jun
25
reviewed No Action Needed open redirect via POST?
Jun
25
comment Nil events in IPS reports today
@void_in my thoughts exactly, if 1-2 is normal, then I might suspect a misconfigured IPS.
Jun
25
answered Ghost CMS abnormal access
Jun
25
comment Encryption Laws in India
This is the type of legal question that IS allowed here: not asking "is this legal?", but rather, "what are the laws?" The answers will not constitute legal advice, but simple research. That said, the research is pretty easy ...
Jun
25
comment Bypass User Account for permissions/priviligies
We are not tech support and we will not help you bypass your company's security.
Jun
25
comment My Virgin Media account password is visible in plaintext to call center staff. What do I do?
You must assess your risks for each asset (I don't cycle all my passwords), but you seem to suggest that with MFA and good practices on the vendor side that you won't change your passwords at all, even after a known disclosure event. Cycling your passwords still needs to be a part of password management.
Jun
24
comment My Virgin Media account password is visible in plaintext to call center staff. What do I do?
You forgot the requirement to refresh your passwords on a schedule. Just setting-and-forgetting passwords will compromise your password management plan.
Jun
24
comment My Virgin Media account password is visible in plaintext to call center staff. What do I do?
You forgot the requirement to refresh your passwords on a schedule. Just setting-and-forgetting passwords will compromise your password management plan.
Jun
24
revised Is This A Run32dll.exe Virus
added 28 characters in body
Jun
24
revised Chaining VPNs to increase privacy?
edited tags
Jun
24
reviewed Leave Open Openssl ciphers: what does Au=ECDH mean?
Jun
24
reviewed Leave Open Reasons for gathering MAC address list
Jun
24
comment Reasons for gathering MAC address list
Ah ok - so in ADDITION to the expressed reason of whitelisting MACs, what reasons might there be? You don't state that there is a primary reason for maintaining a list of MACs.
Jun
24
answered Reasons for gathering MAC address list
Jun
24
comment 3rd party phish feeds
From your most recent response, I have to ask why you need the email content. Most phishing emails include an URL or attachment for the user to act on: most anti-phishing technology parse those things instead of the email content itself because the content is too varied to analyze. I think there will be an easier way to protect against phishing than parsing content.
Jun
24
reviewed Reviewed Finance with the multitude of “Secure Browsers”
Jun
24
comment Finance with the multitude of “Secure Browsers”
I'm not sure Incognito mode belongs on your list - it is not a security mode of operation. As for the specific question of fresh VM and keylogging, those details will be available from the vendor. As for "which is most secure", you don't define what you want to secure against and it is very open-ended and opinion-based.
Jun
24
reviewed No Action Needed Why doesn't the client send data before server's response in TLS session resumption?