12,345 reputation
11654
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 8 months
seen yesterday

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Apr
28
comment Why does a business need to secure its email system?
Your questions are FAR too broad for us to answer.
Apr
28
comment Why does a business need to secure its email system?
Are these homework questions?
Apr
28
comment What are the security impacts of securing with WEP?
Do you know about WPA and how it is better than WEP?
Apr
28
comment What are the security impacts of securing with WEP?
I'm confused by your question. Are you asking why a business would want to secure at all, or what the risks are of securing with WEP, specifically?
Apr
25
comment What are the implications of an overly-restrictive password policy?
@mcgyver5 Agreed, and the password field on the database is hard-coded at 8 chars (so, old).
Apr
25
comment What are the implications of an overly-restrictive password policy?
It means they aren't using a standard library for passwords but rolling their own. The restriction of $ and # confirms it. The repeating letters restriction is a 'feature' that the programmer thought up, so he does a very basic look-ahead search at each character to see if the next character is the same. The problem then is "what ELSE is poorly programmed in this security sub-system?"
Apr
25
comment What to focus on in Cloud security?
The point of a scholarly research is to sift through the mess to focus on what is relevant. This is your first day, be patient. Keep reading. Your focus on IaaS/PaaS is STILL too broad. Keep reading and you will find an avenue to explore that will help you focus.
Apr
24
comment Access control on a primarily windows LAN
It looks like you are caught between the 'theory' and 'practice' forums. I can give general guidance here but for specific implementation, you'll need to consult the appropriate forum (Serverfault)
Apr
16
comment How to make a captcha maker
Have you reviewed the design of established CAPTCHA APIs?
Apr
16
comment Kohnfelder Certificate
Can you edit your question to include all this background?
Apr
16
comment Pattern extraction
I'm not sure that this question is suited for this forum. This is not a security question, but a simple programming/scripting one.
Apr
16
comment Kohnfelder Certificate
Kohnfelder wrote a thesis in 1978 from which we have standards like x.509. Your question supposes that his thesis is a standard that can be compared.
Apr
16
comment Kohnfelder Certificate
Is Kohnfelder a 'standard' or a concept? I can find no reference to it being implemented on its own but through standards like x.509.
Apr
16
comment Can you write OS-related virus using high level languages like Python
I think you need to challenge a lot of assumptions there about programming languages and kernels.
Apr
15
comment I believe my Domain has been hijacked I am not receiving in sales in shopping cart
Did you register your site with siteground? I see that it's your FTP destination. If so, it simply looks like they offer their DNS services for the domain they host for you. I'm not seeing a problem here.
Apr
15
comment I believe my Domain has been hijacked I am not receiving in sales in shopping cart
Did you start having problems with your shopping cart after you denied the siteground IPs, or before?
Apr
14
comment I have discovered a botnet during testing
As for shutting it down, my advice still applies. If you had the power to shut it down, what else could you have done? It's a little like having your fingerprints on a murder weapon, even if you were securing the weapon to prevent further harm.
Apr
14
comment How do I store a user's secret key on a server?
So, users can only read the encrypted files if, and only if, they have an active connection to your server? Why, then, store the files locally? Why not store the files themselves on the server where you have much better control over the protection?
Apr
10
comment Can a smart card with PKI certificate be used to protect a document?
Also, do you mean to ask "can I use a smart card as a secure data storage device?"
Apr
10
comment Can a smart card with PKI certificate be used to protect a document?
Why cards? Why not digitally sign the file with the issuer's certificate? Why not store the rights file in a central location? How do you propose to revoke rights if the file only exists on a physical card? I feel like you're only telling half the story.