17,660 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 3 months
seen 1 hour ago

Security Architect


Feb
9
comment How can steganography be useful in a social networking and sharing website like Facebook or Reddit?
If a law enforcement agency (for example) wanted to investigate all communication between A and B, then images publicly posted would not be considered a communication channel - PMs would.
Feb
9
comment How can steganography be useful in a social networking and sharing website like Facebook or Reddit?
Facebook is designed to transmit messages ....
Feb
9
comment How can steganography be useful in a social networking and sharing website like Facebook or Reddit?
I think you've missed an idea here. If Alice and Bob know that Alice will typically send messages via Facebook using publicly posted images, then any photo posted by Alice will be inspected by Bob for messages. It is not required that each message be specifically identified by Alice. This way, you have a totally out-of-band communication that steg is used.
Feb
9
comment Is there any way to detect caller ID spoofing?
CallerID and phone number are completely different things. Spoofing a phone number is going to be difficult because it is used to route the calls. CallerID is what is easily spoofed.
Feb
9
comment How can steganography be useful in a social networking and sharing website like Facebook or Reddit?
"LEA"? what is that?
Feb
9
comment How can steganography be useful in a social networking and sharing website like Facebook or Reddit?
none of this comment makes sense - social engineering isn't required at all
Feb
8
comment Hacking Course Value (Soft)
You are in a Master's program and hoping that it would be more practical then theoretical? In my experience, education gets more and more theoretical as you progress.
Feb
8
comment How do people know that IP adress belongs to VPN?
Your assertions are not true 1) using a VPN can be against a site's policies (e.g. video streaming outside jurisdictions), and 2) VPN services tend to use a known block of IPs as rbialon states in his answer, so it can be known that one is using a VPN.
Feb
8
comment How can steganography be useful in a social networking and sharing website like Facebook or Reddit?
This question is very confused. You seem to assert that Steganography is useful and not useful, and then want us to answer how it can be really useful. It's hard to ascertain what you are really asking.
Feb
8
comment How can I add modules to a Payload on Metasploit
With a quick Google search, I found "autoruncommands.rc"
Feb
8
comment Is there any way to detect caller ID spoofing?
Are you sure than banks verify caller ID and not simply the phone number itself?
Feb
8
comment Is it worth it to install the same web application on different kind of web servers in a vulnerability assessment?
@Ulkoma source/proof for this assertion? In my experience, only platform vulnerabilities are platform-dependent.
Feb
8
comment How do I know if root account has been compromised?
check the history file for commands that you didn't execute? else look for gaps in the file to indicate deleted entries?
Feb
7
comment Hashing a password, and summing it with every byte in a file. How secure?
I'm also assuming that your program to do this encrypting will also be secure and can't be reverse engineered?
Feb
7
comment Hashing a password, and summing it with every byte in a file. How secure?
Heck, use an encrypted rar file?
Feb
7
comment Hashing a password, and summing it with every byte in a file. How secure?
wait, you're XOR'ing the 'encryption' password with your text document?
Feb
7
comment Hashing a password, and summing it with every byte in a file. How secure?
the way you've written your process is confusing, I've read it several times and I still don't understand
Feb
7
comment Test sslv3 poodle locally in windows
You could run the same command from Linux to your Windows machine.
Feb
7
comment Hashing a password, and summing it with every byte in a file. How secure?
How is the password decrypted after the hashing?
Feb
6
comment Certificate Issuer is Network Company
unless the certs are installed by group policy and employees are informed via corporate policy- then the users are not faced with errors and there is notification