14,609 reputation
12463
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 11 months
seen 18 mins ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


3h
comment How do I view a list of known unpatched windows xp arbitrary code execution vulnerabilities?
@CostinGușă cvedetails is where you need to be. You can download the list then filter the way you want to.
3h
comment Pages, groups or forums suitable for publishing a Location Privacy Survey
Your question boils down to, "where can I post my online survey"? This isn't an Info sec question, but a marketing question. You post your survey where there are the people you want to reach.
Nov
20
comment Confirming a phone is still registered to someone
Unless it was recently changed, in which case those databases you linked to wouldn't help.
Nov
20
comment Confirming a phone is still registered to someone
I'm not sure why needing to reach your tenant on the phone is a requirement. It would be his responsibility to give you his updated number if he changed it. It is also his responsibility to pay, not for you to talk to him about it.
Nov
20
comment How and why does not having https allow people to trace my browsing habits if at home?
The website can trace your browsing habits on its own site, the ad network expands that scope to others within its network.
Nov
20
comment Who can help me decrypt
@Mark Agreed. I'm not sure how that applies here, though.
Nov
20
comment How and why does not having https allow people to trace my browsing habits if at home?
I thought I explained that: it's the ad network, not the site itself that supplies the cookie...
Nov
20
comment How and why does not having https allow people to trace my browsing habits if at home?
Your traffic leaves your home to the websites you're connecting to.
Nov
20
comment Who can help me decrypt
Take a look at the outputs. Do you see how the similar strings result in similar output? This is not encryption, or even a hash - this is encoding.
Nov
20
comment How to exploit vulnerabilities found from OpenVAS?
For custom PHP, you might find more luck by probing the custom code itself - such probing tends to be done by hand or with an automated WebApp scanner (i.e. w3af on Kali)
Nov
20
comment Kerberos based infrastructure with artifactory repo for our java artifcts with Apache reverse proxy and mod auth kerb. how can I access with gradle?
This is a highly product-specific usage and config question. You might have to ask on Gradle's forums: forums.gradle.org/gradle
Nov
20
comment Protected excel sheet is unprotected without permission in google spreadsheet
@R15 Just because a situation has security implications does not mean that it's a valid question here. This is inherently a Google Docs usage question. "How do I in X software?" tends to be a good indication that it's going to be closed. "Why?" and "What are the implications?" tend to be better.
Nov
20
comment Should one worry about using an outdated version of Firefox?
Responsibility? Perhaps not a legal or regulatory one, but the IT staff might appreciate either the head's up or appreciate that someone is concerned.
Nov
19
comment Malware or exploit kit without escalation kit
There are millions of malware samples, with 100's more showing up every day. I'm not sure what you're hoping to find. Is this a homework question?
Nov
19
comment Malware or exploit kit without escalation kit
Are you finding too many malware that escalates? What research have you done? What have you found? Metasploit has modules that do not escalate.
Nov
19
comment What is the best exploit of XSS within 100 characters?
The question asks for the "best" which is subjective.
Nov
19
comment SSO which works well with build tools
You don't give us enough information to help. The way you've phrased the question, anyone could answer any SSO solution, and the answer would be valid. The other danger is to be asking for "product recommendations", which is out of scope for this site. If you want to ask if SSO is appropriate, that's cool here. For product recommendations, there's a forum for that: softwarerecs.stackexchange.com
Nov
19
comment Service_KMS.exe Trojan
We really aren't the best place for virus removal advice. Take your machine to a trained technician or ask the folks at a virus removal forum.
Nov
19
comment What is preventing us to start using scrypt in production ?
The point is to wait for the results of review, not simply to bide your time until a 5 year clock runs out.
Nov
18
comment Is there an AES 256 LUKS encryption option in Fedora?
Because this is a OS-specific configuration/use question, it might be better asked on superuser.