13,630 reputation
12060
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 10 months
seen 5 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Oct
10
comment Detect Different Machine using Browser
that would be 'cookies'
Oct
10
reviewed Leave Closed How many bits of entropy should I aim at for my password?
Oct
10
comment how to pass password file to openssl srp
superuser.com would have people who could help you
Oct
10
reviewed Close Is an 80 bit password good enough for all practical purposes?
Oct
10
reviewed Leave Open NSS / OpenSSL tradeoff on an embedded linux application which uses a TPM via pkcs11?
Oct
10
reviewed Close Website Certificate Revocation check - Big deal?
Oct
10
reviewed Leave Open Is it safe to reveal information about the OS and the software you use?
Oct
10
comment Why does IBM's Intrusion Detection System Show Local IPs instead of Public IPs for the Source of an Attack?
I'd assume this too, but we're not getting enough detail and and the details we do get conflict.
Oct
10
comment how to pass password file to openssl srp
This isn't an Info Sec question, but an application use question.
Oct
9
comment Why does IBM's Intrusion Detection System Show Local IPs instead of Public IPs for the Source of an Attack?
@user57339 I thot you said it was a private IP range?
Oct
9
comment Why does IBM's Intrusion Detection System Show Local IPs instead of Public IPs for the Source of an Attack?
And you are certain that the attack originated from an external source? Is the reported IP in your org's normal IP range? Do you use a proxy?
Oct
9
reviewed Approve suggested edit on luks tag wiki excerpt
Oct
9
reviewed Approve suggested edit on luks tag wiki
Oct
9
comment Why does IBM's Intrusion Detection System Show Local IPs instead of Public IPs for the Source of an Attack?
this really isn't an answer
Oct
9
comment Why does IBM's Intrusion Detection System Show Local IPs instead of Public IPs for the Source of an Attack?
Depends on your architecture? We'll need more info to work on. Where is your IDS situated in relation to the Internet?
Oct
9
comment Is it a security risk to use an unknown web browser?
Your question can easily be translated as "how dangerous is it to run unknown software of any kind?" You know the answer to that question, and so does Google ....
Oct
9
comment Isn't the behaviour of the switch to flood packets when it's MAC table is still empty dangerous?
Then you've answered your own question: "for some protocols, where the very first packet can contain interesting information, then the situation can result in data leakage". Most organizations would not see this as a 'danger' though because it is limited to a single packet.
Oct
9
reviewed Approve suggested edit on How secure is Ubuntu's default full-disk encryption?
Oct
9
comment Isn't the behaviour of the switch to flood packets when it's MAC table is still empty dangerous?
sure, but my point is that C cannot see what A is sending to B, just that A wants to connect to B. In your scenario, there is very little actually exposed.
Oct
9
comment Isn't the behaviour of the switch to flood packets when it's MAC table is still empty dangerous?
"see what it wants to send to host B" - you mean the first of the 3-way handshake and not the payload of the application, right?