14,609 reputation
12463
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 11 months
seen yesterday

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Aug
5
comment Unrecognizable Icon. Virus?
@Boann I've seen malware install with system try icons. Heck, even evil browser bars are visible.
Aug
5
comment What's the most secure way to send information from one device to another?
Secure against what? This is the primary question.
Aug
2
comment MS-Word and Digital Signatures
I did a Google search for your problem and got an article directly from Microsoft. Assuming that you did the same search, what about the articles you found did not meet your needs?
Jul
28
comment Browsec - VPN and anonymizer
To review this specific browser extension, we would need to do a code review. We can't do that for you. We can, instead, talk about the risks in general for browser extensions.
Jul
28
comment Exchange 2013 blocks txt file attachments - are there security reasons?
I made an edit to the question to clarify that the blocking is done by default on Exchange 2013. Yes, I know that file extensions are meaningless, but the question is about the risks of text files themselves.
Jul
28
comment Hacking machines using internet packets
Or, by "packet" he meant "email", in which case, it was a simple phishing attack.
Jul
28
comment Browsec - VPN and anonymizer
Your question really seems to be about the security of browser plug-ins. If this is true, can you suggest an edit to the title?
Jul
24
comment How do to keep programs updated
But your dilemma highlights the opportunity. How DOES one update software that does not have active updating in Windows? There are ways to do it.
Jul
24
comment How do to keep programs updated
Your "etc" defeats your answer. Would it not be better to upgrade everything? How do you determine the "important programs" or what the "etc." should include? Although the first part of your answer is the answer for Linux, the rest is very "hand-wavy" and not helpful.
Jul
23
comment what type of attack does LOIC do?
"Denial of Service" is a broad category of attack. Trying to list them all is not going to be helpful.
Jul
23
comment Help me catch someone red handed on our server.
It's a shared account/password, correct? How would you hope to limit your scope to a certain individual?
Jul
23
comment Access rights management in large companies
Does LDAP fit into your expectations?
Jul
23
comment Has personal computing security gotten better or worse in recent years?
Quieter threats, that's all.
Jul
23
comment Can I safely use my own statistics to assess password strength on number of times a password is used?
So, a message like, "That password has already been used by many other users of this site. Please choose another." ? Great. Now I have a confirmed password used by N number of users. all I have to do is brute-force account names, which are not private.
Jul
23
comment Open list of adult websites for child internet
DNS services provide this for free. Keeping up with the infinite list is too resource intensive to maintain in a text file.
Jul
23
comment Someone borrowed my phone and Im scared its hacked
HE WAS TOO SHY TO ASK FOR YOUR NUMBER!
Jul
23
comment Someone borrowed my phone and Im scared its hacked
I have NO clue how this could possibly be an IT Security question.
Jul
22
comment Sign contents of entire computer?
You store the hash outside of the computer (email?). Signing performs a hash, then applies your personal key to the hash so that a recipient knows that you are the owner of the contents and the hash. I'm not sure what you gain by adding a Digital Sig.
Jul
22
comment Sign contents of entire computer?
Would a hash work just as well? You could hash the entire contents before you are away from your computer then verify when you get back?
Jul
22
comment CLI API that requires plaintext user details
So, the data supplied by the client have to match the data stored on the server? Sounds like the same problem that password has. How is the password model not the same as your situation? Transmit hashes of the data? What about shifting to Asymmetric Keys instead?