19,572 reputation
33677
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 5 months
seen 7 hours ago

Security Architect


Apr
2
comment What are the pros and cons (from security perspective) of stateful protocols vs stateless protocols (and vice versa)?
stateful traffic protocols do not remember the "past", but relate current conversations/streams as being part of a single communication
Apr
2
comment What are the pros and cons (from security perspective) of stateful protocols vs stateless protocols (and vice versa)?
You don't actually address the security implications.
Apr
2
comment What are the pros and cons (from security perspective) of stateful protocols vs stateless protocols (and vice versa)?
Is this a homework question? Have you done any research on your own? What kinds of "protocols" are you asking about (network?)?
Apr
2
comment Meterpreter:execute command failed
this is a software-specific error question and not an InfoSec question - a Metasploit forum would be a better place to ask
Apr
2
comment Arp-spoofing local network, Devices can't see eachother
how often are you sending ARP spoofing replies?
Apr
2
comment Do Chrome and Firefox send random values rather than the actual timestamp in ClientHello of TLS?
@Xander raises hand I was thinking this was a browser-specific question, and not so much a pure TLS question. Retracting vote.
Apr
1
comment Is it safe to store a password hash history for preventing user to keep same password repeatedly in some cases?
you appear to use "encrypt" and "hash" interchangeably?
Apr
1
comment Mitigating DDOS in P2P systems
@AndréDaniel assuming the attacking nodes are servers?
Apr
1
comment Identify the attestation certificate (X.509) in Fido U2F registration response
ok - then this isn't an InfoSec question (or even a x.509 question), this is a question for Fido and their message format. There isn't much we can help you with.
Apr
1
comment Mitigating DDOS in P2P systems
@AndréDaniel but you also just said that ISPs don't care. How is contacting each one by one supposed to work?
Apr
1
comment Mitigating DDOS in P2P systems
@MaxK Your new scenario here doesn't sound like DDoS anymore. Are you worried about a Distributed attack or a single threat?
Mar
31
comment Mitigating DDOS in P2P systems
The problem with DDoS is that you need control over multiple routes of entry. With a single end user, the solution is to contact your ISP to ask them to handle the problem: they have the tools to help.
Mar
31
comment Identify the attestation certificate (X.509) in Fido U2F registration response
it looks like you simply need a x.509 parser - you will have to look for one in the language you are using
Mar
31
comment Vmware over unsecure os
To sum my concerns: Red Pill doesn't exist. Blue Pill doesn't apply to the question.
Mar
31
comment How to analyze spam email URLs to detect exploits?
This is great info, but I'm not sure that the OP was confused about what the URLs were (used curl on them).
Mar
31
comment Is there anyway to easily decipher this virus code?
ok, then what about the code do you need deciphered?
Mar
30
comment How can MITM be performed in WebRTC?
Can you provide the source to the statement that certificates are self-signed?
Mar
30
comment How can MITM be performed in WebRTC?
This is a question for the WebRTC devs.
Mar
30
comment Is it necessary to protect ATM pins against malware that has no access to the physical card?
The article itself explains that it's not just the PIN but the card number, too, along with the bank you use and your account information. In some cases, with this info they can create a physical card.
Mar
30
comment How to use SSL approach at the application level
why not simply use TLS in the application?