18,231 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 4 months
seen 26 mins ago

Security Architect


44m
comment Url quote escape (whenever I place a quote in the url, it escape it with '/)
we would need to know more about the server and how it escapes it - do you have access to the server?
45m
comment How do I allow for anonymous encryption?
I think that you are trying to battle different problems on different layers of the communication stack. You need to separate those problems and deal with them differently. Perhaps you need to explain what problem you are trying to solve?
55m
comment How do I allow for anonymous encryption?
How are you managing the navigation, selection, and routing of the hops? What does the "hopping" add to the security of the message? If Bob uses the target's public key, how could a node in the chain replace it? How are you hoping to improve on the basic TLS protocol?
1h
comment What is the alternative tool for Honeypots?
I'm not even sure what you described falls under the definition of "honeypot". I'd be delighted to be corrected on this one, though. Even if it is, I'm not sure it answers the question, and the OP specifically mentions network-based honeypots.
4h
comment How do dissidents use Tor?
Please make sure you use proper syntax when answering.
5h
comment What is the alternative tool for Honeypots?
I'm not sure that what you are describing is a honeypot. Certainly not the type of honeypot the OP is talking about.
5h
comment A local IP address (RFC 1918) on my network that is not … local ..
Too many things that it could be, and we are not a network troubleshooting forum. Interesting puzzle, though.
6h
comment Has anyone used this ICLOAK USB device?
Ah, thanks for evidence. One thing, tho: How is Tails on a USB drive different? I simply don't see a basis for your claim that they are "fooling naive customers". There is the firmware vector that they cannot account for (no one could), but you yourself suggested that the probability was low and the hardware limitations are real. I still don't see the basis for such a scathing critique.
6h
comment Has anyone used this ICLOAK USB device?
I'm not defending the product, but I think you are overreaching in your critique. 1) I'm not seeing claims of being a "silver bullet", merely the "best available". 2) Yes, an encrypted stream might be detected, but that does not defeat privacy or anonymity. 3) They, themselves, advocate installing Tails on a USB stick. 4) Can you provide evidence of firmware eavesdropping that survives rebooting to an attached USB drive? If you can reboot the machine and trigger booting to USB, you do have a lot of control over the machine.
6h
comment Can you securely allow users to create VM's on their workstations
Perhaps you need to differentiate between "Virtual Machines" and "Virtual Containers" - Virtual Machines allow you to install OS's, Virtual Containers allow you to augment the existing OS. Suddenly dropping a Windows OS into a all-Linux environment could drastically change the security of the network.
7h
comment What is the alternative tool for Honeypots?
So, my answer is: don't use a pre-programmed honeypot - use a normal server and export the logs. Any attempt to connect or use the honeypot is an incident and it is completely undetectable as a honeypot. But, from your question, I have no idea if that answer is helpful or not.
7h
comment What is the alternative tool for Honeypots?
There are many kinds of honeypots, and not all are detectable because some are simply a real server in a fake environment. Can you explain what you want a honeypot to do?
8h
comment How is ECIES available in FIPS Validated libraries?
I'm using the language from the NIST list of "Validated Modules" of which BSAFE is one. BSAFE is a FIPS-Validated module with a non-FIPS algorithm.
9h
comment Extraneus message about security risk when I open a new Chrome tab
Your question is a little confused: it is both a phishing technique and an indication of malware installed (likely in a Chrome extension if it went away when you switch to Firefox). Aside from that, you should have a professional look at your machine to determine if the infection was greater than just the browser. Or just nuke your computer and rebuild (you DO keep backups, right?)
1d
comment How to keep track of registry changes in a Windows based system
@windowslabourer yes, you have security applications, but the primary question is an API/Windows OS internal operation question.
1d
comment Downloadable Autonomous System contact information
A quick Google search yielded: arin.net/resources/request/bulkwhois.html but frankly, I handle this situation by using a secondary internet connection to do a whois lookup
1d
comment What protections are put in place to prevent rootkits from getting ring 0 access?
Wiki helps to explain: en.wikipedia.org/wiki/Rootkit#Kernel_mode
1d
comment Decode Obfuscated Malicious PHP Code
I'm assuming that you truncated the code with ...... ?
1d
comment attack on mysql for empty field
Ok - now why do you think that means that someone can attack your server?
1d
comment Is cacert.org more harmful than self-signing?
you could inspect the new cert when they issue it