17,640 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 3 months
seen 7 hours ago

Security Architect


7h
comment Should Information Security have Local Admin and Domain Admin Privileges
what do you mean by "Information Security"? Who or what are you referencing?
14h
comment How can I stop this remote attack?
netstat should show more than that - use the -a switch to see everything? Then correlate with the most recent firewall log (the most recent port used). hopefully, something should show on port 2345.
14h
comment Snort report - 1000+ alerts in 1 minute from port 5060
In general, 1000 bad connections in a minute, which then stop, isn't that big of a deal. Without any further data, I might say that someone misconfigured their VOIP server for a moment.
14h
comment Snort report - 1000+ alerts in 1 minute from port 5060
There isn't a lot for us to go on - the source port is 5060, which is SIP/VOIP, and it's coming from Portugal. Is there anything else you can tell us?
17h
comment What Firefox settings should be changed from factory defaults to ensure privacy vis-à-vis Mozilla?
I went for the platform independent option, but, I also agree with you that I'd prefer Mozilla over Google for privacy. The question was about avoiding Mozilla, not privacy in general :) (checks overhead for a joke that might ben passing me by)
18h
comment What Firefox settings should be changed from factory defaults to ensure privacy vis-à-vis Mozilla?
make the executable a symlink to Chrome?
18h
comment AES or Serpent-Twofish-AES
@AndréDaniel ducks while the joke flies over my head sorry :)
18h
comment Recommended policy on password complexity
xkcd/936 is a meme in InfoSec with many studies pro/con.
18h
comment AES or Serpent-Twofish-AES
@AndréDaniel You are absolutely correct. But I'm of the opinion that the OP would have said "bitcoin wallet" or similar.
18h
comment How do nested vpns through VM work?
I made a tentative diagram change according to what I understand your setup to be.
18h
comment How do nested vpns through VM work?
That is going to depend on how you have set up your networking, actually. I think the deeper answer to your question is, "how do I set up the nested VPN so that it uses the parent VPN as a native network connection?" That's going to depend on the VM technology used and how you have configured the host. For that question, you will find more experts on ServerFault.SE
18h
comment AES or Serpent-Twofish-AES
how does one encrypt money?
18h
comment How do nested vpns through VM work?
If I understood your setup, then your diagram is not accurate. You are tunneling VPN2 within VPN1 (assuming the appropriate network setup). Then for question #1, which IP are you asking about?
19h
comment Anti-virus anonymity question
@pseudon the problem is the question being asked. The question can simply be boiled down to, "am I leaking information by using an AV URL checker?" and he answers his own question. How the VPN concern and the AV concern intersects is unclear in the question.
19h
comment Calling a HTTPS web service
This might be better asked of PayPoint.
19h
comment Is it necessary to purchase an OID for ADCS?
you mean you want a private OID?
1d
comment Anti-virus anonymity question
I think you are co-mingling ideas here. First, the reasons why VPN logs are not desirable, second, the potential of "monetization of clickstreams" by the AV vendors.
1d
comment Pinging a host in another network
@r4m80 regardless of the potential security applications, this is a basic networking question. Private IP ranges do not get routed over the Internet by design. It doesn't matter if there is port forwarding or not: the routers in the chain won't route the packet. But I'm getting the feeling that you have another problem in mind. It IS possible to create a tunnel from one LAN to another using an intermediary thereby creating a direct connection. But that's not what you asked.
1d
comment Pinging a host in another network
@r4m80 in order to reach the destination, all routers in the chain need to know where to send your ICMP packet. Without a route, your packet dies.
1d
comment Pinging a host in another network
The problem with the spoofed IP, is that you would never get the reply. The 'exploit way' was great for DoS, but not communication.