12,935 reputation
11957
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 9 months
seen 2 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


2h
comment How safe is to secure sensitive content by URL with MD5 hash and no other authorization?
You don't need to crawl through ALL combinations - you just need to find ONE that you are not authorized to access. That proves the method is broken. Because it is an MD5 hash, it is also likely the same length each time, which makes it easier to narrow in on a valid link.
7h
comment Why is it a security problem not to update ones browser?
When you visit a web page, it hosts malware somewhere on the page. Your browser downloads the content and processes it, but it exploits a bug in your browser. In the background, it installs a keylogger. Now everything you type is sent to an attacker. These holes are common. Raz has a nice list.
10h
comment One time passwords using Mobile phones
assuming that one's memory is good enough to pull random behavior from the previous session. This might work for some people for some websites, but can't be considered a universal solution. If you don't log in for a few months, will you remember?
10h
comment One time passwords using Mobile phones
There have been attempts to use keystroke analysis in the same way as biometrics, but it too is very early, and easy to fake and change. Imagine what a bandage on a finger would do to one's ability to type normally.
10h
comment Identifying Memorable Composition Rules
@Curious People will share their ACTUAL passwords for candy ... They'll answer questions about their methods to show how clever they are.
10h
comment Identifying Memorable Composition Rules
You could run surveys and ask people what methods they use ....
1d
comment airodump-ng + Getting near by wlan + bluetooth MAC addresses
NOt a security question, but an interesting project!
1d
comment My IP (with a NAS) is targeted by a hacker. What to do? Should I be worried?
Technically, he is answering the OP's question, I think. It's just a really short answer: disable ssh and telnet. I had trouble deciding if this needed moderation.
1d
comment Suspicious phone call claiming MS Office not updated lately
They want to install malware on your machine and gather personal info over the phone. It is a known attack.
1d
comment THC Hydra 16 Valid Passwords?
The failure condition is the one thing most people forget to do for Hydra.
1d
comment My IP (with a NAS) is targeted by a hacker. What to do? Should I be worried?
@Peteris you are correct that there is 'background radiation' of the Internet and things get scanned and probed as a matter of course. But, persistent brute force attempts are another matter and should not be brushed aside. Do we need to panic? No, but it does need to be handled.
1d
comment My IP (with a NAS) is targeted by a hacker. What to do? Should I be worried?
the OP seems to suggest that it isn't just a port scan, but login attempts.
2d
comment My IP (with a NAS) is targeted by a hacker. What to do? Should I be worried?
I think we have a language barrier here. I'm neither emotional nor irrational. I'm asking for clarification because I have never heard anyone before suggest that the presence of bots should not cause worry. You brought up bots as a subject. Bots share information. Bots are part of networks called 'botnets'. Some are simple, some are not. Either way, the OP should act to protect himself, perhaps even as you suggest, but your last paragraph is odd.
2d
comment Anonymity on Facebook - how do they suggest people I should know?
The OP seemed to suggest that he had not made connections yet ...
2d
comment My IP (with a NAS) is targeted by a hacker. What to do? Should I be worried?
You're saying that the OP should not be worried because they haven't been successful yet? Bots are too simple to break security? I run my own private honeypots. I KNOW those bots inside and out. You simply cannot tell people that once they are in the sights of a botnet, that there is nothing to worry about: it's dangerous and wrong on the facts. Yes, some use wordlists of default passwords, but others DO NOT.
2d
comment My IP (with a NAS) is targeted by a hacker. What to do? Should I be worried?
You state that the OP should not be worried that there are many, many bots trying to break in. Such a situation would increase my worry, not decrease it. Can you explain why the worry should be reduced?
2d
comment My IP (with a NAS) is targeted by a hacker. What to do? Should I be worried?
Should NOT be worried that there is an army banging down his door?
2d
comment Implication in canaries that places a null
Or at least to identify them as homework questions and to outline what you do know about the question and the part of the question that you need help with.
2d
comment OSSEC, what is it telling me about port changes?
You have it correct, assuming that you didn't cut off the output to post here.
2d
comment Amazon login request on port 843 to fnes.amazon.com
They use Flash to deliver content...