18,232 reputation
23375
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 4 months
seen 1 hour ago

Security Architect


Mar
4
comment Possibility to sniff HTTPS traffic on devices without installing a certificate
Have you exploited FREAK? I'm not sure that you can casually suggest it as a viable solution.
Mar
4
comment Possibility to sniff HTTPS traffic on devices without installing a certificate
You do not need file system access, but you do need access to the browser - do you have that kind of access? Can you expound on what "digital device" you are talking about?
Mar
4
comment What does this PHP injected-code do?
@Angelo.Hannes Yep - a full code explanation would be more helpful, but seeing that the OP didn't decode the blob, I figured that a simple decode would be helpful. The OP's code snippet doesn't look malicious, but the decoded code indicates the greater problem. At this point,
Mar
4
comment How does duplicated RFID work?
If a reader can read the GUID, why can't it be duplicated? Have you done any research? This is a very popular and well-written topic.
Mar
4
comment What does this PHP injected-code do?
this explains @cc_on: msdn.microsoft.com/en-us/library/8ka90k2e(v=vs.94).aspx
Mar
4
comment ssl+symmetric with my own encryption algorithm?
Then, sure, you have your answer. You can write an encryption algorithm in C. I'm thinking, though, that adding the burden of designing your own algorithm might push back the time it will take to finish your main project.
Mar
4
comment ssl+symmetric with my own encryption algorithm?
I'm not sure that you have done much research on your own for this question. Of course encryption algorithms can be written in C - so many existing ones already have libraries in C.
Mar
4
comment ssl+symmetric with my own encryption algorithm?
Why do you want to write your own? There are so many good ones already written (and verified).
Mar
4
comment Can a school legally access an account that a student logged in to at school?
When dealing with minors, I have heard of some surprising powers granted to schools, but that is entirely dependant on jurisdiction. I cannot speak for Indiana or the US, though.
Mar
4
comment Can a school legally access an account that a student logged in to at school?
If you remove the legal question, what is the question to be asked?
Mar
3
comment What are the biggest security risks/considerations for hosting your own private website?
Step 1: assume your server will be taken over in the first week. Step 2: now design your security.
Mar
3
comment What methods can be used to prevent the browser (IE11 specifically) from storing credentials / autocomplete
are you sure that it's the browser filling in the values and not a plugin (LastPass, etc.)?
Mar
3
comment Can a school legally access an account that a student logged in to at school?
I'm voting to close this question as off-topic because legal questions are highly dependant on jurisdiction and we are InfoSec professionals, not legal advisors.
Mar
3
comment Can a school legally access an account that a student logged in to at school?
What do you mean "said at the school"? Do you mean verbally? Because if the school network was used to transmit communications, then the school would have a record of that communication.
Mar
3
comment Can a school legally access an account that a student logged in to at school?
There is a HUGE distinction that is being blurred: did the school log into the student's non-school account, or did the school merely listen/observe what was being communicated while the student was using the account?
Mar
3
comment List of cookie parameter names to identify load balancing mechanism
In short, looking for cookie names is not the way to go. There are many other better ways to do this analysis.
Mar
3
comment List of cookie parameter names to identify load balancing mechanism
I'm not sure this will have a definitive answer. On Fortinet Load Balancers, the admin creates the name. I always used "oreo".
Mar
3
comment DDoS Detection devices available in the market?
This is a question very easily answered with a google search. Assuming that you've done that, what additional information can we provide?
Mar
3
comment Why some routers ask for PIN but can't be cracked using PIN-based attacks?
Wait - you don't KNOW the configuration of these routers? You don't own them?
Mar
3
comment What are the repercussions of a DDoS attack on a website?
Have you done any research on these questions? These are pretty easily answered with a couple search queries.