14,679 reputation
12463
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 11 months
seen 3 hours ago

Security Architect

Owner of: SelfPhish.com


3h
comment W3af and automated vulnerability scanners vs manual testing
Add to your list that the automated tests are more easily repeatable after remediation.
3h
comment Nmap from Kali Linux and from Amazon EC2 instance - vastly differing results
Can you edit your question to include sanitized command you're running on both? Consider that EC2 might be blocking some traffic out (or in) as suspicious.
4h
comment google reCAPTCHA V2 “Use of undefined constant ..”
This is a code review question and not an Info Sec question.
4h
comment Why does integrity exclude confidentiality?
@hansn No. It really, really doesn't matter.
6h
comment Why does integrity exclude confidentiality?
@hansn This explanation is is a complete over-simplification of the concepts. It is so simple, it's wrong.
8h
comment Secure voice app
Then where does the landline come in?
9h
comment Secure voice app
@AndréDaniel I know that's what he meant. He's looking to make landline calls, though, which means he's looking for control over the telco that simply isn't possible. You'd have to have a custom modem on each end.
10h
comment Are Linux vendor-supplied security updates enough for PCI Compliance?
I'm not sure that you can state that CentOS is the 'vendor' of PHP, but rather the supplier of install packages. From a practical point of view, if a distro fails to update its own repo and there are known security patches that need to be applied, you can't blame the distro repo for your lack of patching. That's why there are PCI patch scanners (that the OP used).
10h
comment Are Linux vendor-supplied security updates enough for PCI Compliance?
I understand your point, but the OP stated they they knew that the versions installed were behind on versions. Once you know, you have the responsibility to patch yourself.
10h
comment Encrypt Lightning event invite mails with pgp
This is a product-specific configuration question. You'd find better help on other sites.
10h
comment Good book about creating malware, not just analyzing it
"Malware" is such a wide topic. You'd need to narrow your focus to particular types of malware before you'd find a 'book'. But even then, what you'd find are online tutorials on hacking forums.
10h
comment Secure voice app
How does one "encrypt sound"? I'm not sure that you understand how telephones work. They haven't used "sound" in many decades.
10h
comment SSL certificate expired
you assume it was an email ...
10h
comment SSL certificate expired
@DTK that was my thought, but then they wouldn't be trying to "sell" him something.
1d
comment Definitions of PKCS#11 abbreviations
Wouldn't this be in the spec or library?
1d
comment SSL certificate expired
did they contact you to tell you that your SSL expired?
1d
comment Risk when attacker has only physical access to a computer's USB port
I have a USB device from Yahoo's marketing team that opens a browser window, types in an URL, then executes. Imagine the damage that can be done with that if the URL was customized ...
1d
comment Error 207: ERR_CERT_INVALID
This is really a server config question. Flag this question for migration and we'll get it to the right place.
1d
comment typical request, what type of encryption is this?
You are confusing encoding, encrypting, and hashing. Where did you get those password strings?
1d
comment Anonymity on Facebook. Most of the answers are at least partially incorrect
What is your question?