20,799 reputation
33981
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 6 months
seen 1 hour ago

Security Architect


May
10
comment Is my LAN infected?
Check the DNS on your router?
May
10
comment Is my LAN infected?
Perhaps your ISP is redirecting ad networks?
May
10
comment Analyzing a TLS connection?
The biggest question in your analysis is: what do you want to secure against? What's the risk you want to mitigate?
May
10
comment Analyzing a TLS connection?
DNS servers are increasingly under attack and notoriously difficult to secure properly.
May
10
comment I have been accused of sending porn to my fiance's ex
First, IP addresses cannot be spoofed in the way you are thinking. Second, without the original headers from the email, there is nothing you can prove.
May
9
comment New Gmail login system—going against conventional wisdom?
@EricG then there's that ...
May
9
comment Which passwords to exclude from a password manager?
@Mark although the answer doesn't address the question head-on, it does address the underlying problem expressed. "Store all passwords, but obfuscate." It might not be the best answer, but it is a valid approach to deal with the problem.
May
9
comment Sensitive issue regarding windows 8 password
I'm sorry that your friend died. Unfortunately, this is not a tech support forum. You can try talking to a local computer repair shop who can extract the files from the hard drive directly, or who can show you how.
May
8
comment Why aren't all photo-IDs/cards digitized these days, for security/convenience?
@PurposeBunny Ah, so your post isn't a question, but an assertion that you want people to agree with.
May
8
comment Why aren't all photo-IDs/cards digitized these days, for security/convenience?
@PurposeBunny I see your proposed idea, but there are large gaps in it. Your focus is on your interactions with the government, but it is not just the government that needs your ID. How does the bouncer at the bar determine what your age is? Logistically?
May
8
comment PKCS7 vs TLS 1.2 padding
this might be a better fit over at crypto.se
May
8
comment 3rd Party Authentication protocol
There are many modes for SAML, and it can work the way you need it to, at least on a high level.
May
8
comment 3rd Party Authentication protocol
Have you looked at SAML?
May
8
comment Why aren't all photo-IDs/cards digitized these days, for security/convenience?
This might be a little broad and opinion-based. How would you get into bars? How would you combat counterfeiting? Would you really want to trust/rely on a functioning government server to verify your id just to get a store membership and discount at the cashier?
May
8
comment Internal access to security sensitive data in a company
Separation of Duties is very important and tricky to implement - if you don't have that, then the rest is moot.
May
8
comment Internal access to security sensitive data in a company
You need to be able to access customer data in order to properly provide the service they contracted you for, so access IS ethical on that basis alone
May
8
comment Internal access to security sensitive data in a company
Are you sure your concern is "ethics"?
May
8
comment Security devices other than firewall and IDS
What research have you done?
May
8
comment How to publish scanned documents anonymously?
@StephenWilkinson you are making some large assumptions about the nature of the documents the OP wishes to disclose. The OP is also constraining the conversation to technological traces. While your points cover the wider discussion, you cannot say that the other answers will "not protect him one bit". There may be gaps, but they are also not wrong.
May
7
comment PCI server room on premises: how to handle office visitors?
You PCI QSA really needs to weigh in on your particular situation, but #2-4 should be standard, regardless.