18,466 reputation
23375
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 4 months
seen 23 mins ago

Security Architect


28m
comment How to secure a login without SSL (or implementing it in a clever way)?
Put another way, if you feel that encryption OR authentication will solve your problem, then you're looking at the wrong problem. It's a little like saying, "I either need a lock on my door or a cell phone."
31m
comment How to secure a login without SSL (or implementing it in a clever way)?
Then you need to split up your question. Encrypting communication and authentication schemes are different topics and a single answer is unlikely to help answer both well.
38m
comment Timestamp response behaviors in different tools
Nothing about your tests have anything to do with pentesting. This is a networking question that might be useful when pentesting.
39m
comment Timestamp response behaviors in different tools
If you want to understand what may be different, capture the packets from your machine when you run the 2 tests and see how the 2 programs send their traffic.
41m
comment Timestamp response behaviors in different tools
This is in no way an InfoSec question.
41m
comment How to attack a web page to gain username and password of any or specific user?
There are a thousand different answers! Please do some research on your own.
57m
comment backdoor php trojan still dangerous on my local machine?
I think you are missing some crucial info in your question. You removed the files with backdoors and copied them to your local computer and your AV reports them as malicious? And you want to know if they are still malicious even though you are not serving them on a web server?
1h
comment How to attack a web page to gain username and password of any or specific user?
Just like your previous question, this is far too broad to answer.
1h
comment How can I explain “zero knowledge proof” to an end user?
mathoverflow has a coloured ball analogy: mathoverflow.net/questions/22624/…
1h
comment How can I explain “zero knowledge proof” to an end user?
wiki also has the Peggy/Victor example: en.wikipedia.org/wiki/Zero-knowledge_proof
1h
comment How to secure a login without SSL (or implementing it in a clever way)?
TLS and Kerberos are two very different technologies addressing very different issues. What problem do you want to solve?
1h
comment How to attack on a web page to gain username and password?
This answer doesn't really help with the question as stated.
1h
comment How to attack on a web page to gain username and password?
Do you want to gain any username or password, or a specific user's credentials? HTML and CSS don't help you with an answer to this question. "Server languages: any" is the part that really needs to be fleshed out.
5h
comment Disadvantages of Using a VPN?
I'm not sure that I understand the hole in security you talk about. If 2 users are on the same machine, and each user opens a network connection that involves the VPN, you are saying that the users can see each other's traffic? Wouldn't they see each other's traffic anyway without the VPN?
5h
comment How to make my PHP website vulnerable to SQL injection
This is not really an answer.
5h
comment blocking skype or webcam signals via router?
You will have to look at your router's manual. Different routers can do different things.
5h
comment How to secure peer-to-peer chat (includes video) - school project
This is far too broad to answer. Is there a central server where all communications go through? Why is UDP a concern? Why do you think everyone needs a cert?
8h
comment How to make my PHP website vulnerable to SQL injection
possible duplicate of Looking for [intentionally made] vulnerable applications suitable for practicing different penetration techniques (NOT a web apps, user side ones)
10h
comment Is Cryptree suitable for cloud storage?
it's really going to depend on the regulations your are subject to.
10h
comment What are the implications of NSA surveillance on the average internet user?
The reports are not "unconfirmed" at all. It is public knowledge that the DoD runs Tor nodes. They aren't being sneaky about it - they too benefit from Tor.