10,038 reputation
11547
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 4 months
seen 2 hours ago

Canadian insurance company Security Manager.


10h
comment Access control on a primarily windows LAN
It looks like you are caught between the 'theory' and 'practice' forums. I can give general guidance here but for specific implementation, you'll need to consult the appropriate forum (Serverfault)
Apr
16
comment How to make a captcha maker
Have you reviewed the design of established CAPTCHA APIs?
Apr
16
comment Kohnfelder Certificate
Can you edit your question to include all this background?
Apr
16
comment Pattern extraction
I'm not sure that this question is suited for this forum. This is not a security question, but a simple programming/scripting one.
Apr
16
comment Kohnfelder Certificate
Kohnfelder wrote a thesis in 1978 from which we have standards like x.509. Your question supposes that his thesis is a standard that can be compared.
Apr
16
comment Kohnfelder Certificate
Is Kohnfelder a 'standard' or a concept? I can find no reference to it being implemented on its own but through standards like x.509.
Apr
16
comment Can you write OS-related virus using high level languages like Python
I think you need to challenge a lot of assumptions there about programming languages and kernels.
Apr
15
comment I believe my Domain has been hijacked I am not receiving in sales in shopping cart
Did you register your site with siteground? I see that it's your FTP destination. If so, it simply looks like they offer their DNS services for the domain they host for you. I'm not seeing a problem here.
Apr
15
comment Snort reading pcap
Are you sure the alert rules are configured correctly? Can you manually copy a couple alertable packets with a couple non-alertable packets into a test pcap file and run the commands?
Apr
15
comment I believe my Domain has been hijacked I am not receiving in sales in shopping cart
Did you start having problems with your shopping cart after you denied the siteground IPs, or before?
Apr
14
comment Visual Studio won't record updated text after clicking a button
This is totally the wrong forum for this question.
Apr
14
comment I have discovered a botnet during testing
As for shutting it down, my advice still applies. If you had the power to shut it down, what else could you have done? It's a little like having your fingerprints on a murder weapon, even if you were securing the weapon to prevent further harm.
Apr
14
comment How do I store a user's secret key on a server?
So, users can only read the encrypted files if, and only if, they have an active connection to your server? Why, then, store the files locally? Why not store the files themselves on the server where you have much better control over the protection?
Apr
10
comment Can a smart card with PKI certificate be used to protect a document?
Also, do you mean to ask "can I use a smart card as a secure data storage device?"
Apr
10
comment Can a smart card with PKI certificate be used to protect a document?
Why cards? Why not digitally sign the file with the issuer's certificate? Why not store the rights file in a central location? How do you propose to revoke rights if the file only exists on a physical card? I feel like you're only telling half the story.
Mar
27
comment server with eth0 promisc-mode vulnerable to attacks outside firewall?
Then your answer makes no sense. You reduced the definitions to a point where they lost meaning. His wording is what he wanted to say "is it vulnerable to attacks" - he did not ask if it was exploitable.
Mar
27
comment server with eth0 promisc-mode vulnerable to attacks outside firewall?
I'm not sure you understand his question. To use your analogy, he's asking if his guard dog is exploitable...
Mar
26
comment True?: “Nearly all encrypted passwords are stored with the last character in clear text”?
The article cites NASA, but does not provide a reference. From the language of the citations, one wonders if the 'last character in plain text' issue is internal to NASA and not a general weakness in encryption schemes...
Mar
25
comment security management and security engineering difference
Assuming that you have looked up those terms, perhaps you can add to your question about what specifically you don't understand about the definitions that you've found.
Mar
25
comment Is Google overreaching by forcing me to use TLS?
+1 herd immunity