17,660 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 3 months
seen 5 hours ago

Security Architect


1d
comment certification verification using x509
I assume with your tags that you need to do this in Java?
1d
comment What can you do with an ATM pin but no card
The article itself explains that it's not just the PIN but the card number, too, along with the bank you use and your account information. In some cases, with this info they can create a physical card.
1d
comment How to use SSL approach at the application level
why not simply use TLS in the application?
1d
comment Need some docs that say we shouldn't upper the string when saving it as a password
@FelipeM By changing a password to upper, you fundamentally change the password. There is not going to be a doc that says not to do this. By switching to upper(), you might as well change "testpassword123" and every other submitted password into "password" and there won't be a doc that tell you not to do that, either. Sure, the practical reason is about reducing complexity, but the basic principle is to not change the password submitted. The reasons why are inherently obvious.
1d
comment What dashboards are really helpful in a Security Operations Center(SOC)
This question seems to assume that all SOCs display the same dashboards. Every SOC I have worked with design and craft their own dashboards based on their requirements. Data in a SOC is tied to an internal control and the results from a module must be tied to a reaction. From that perspective, each SOC performs their own ongoing empirical analysis of each data point.
Mar
29
comment Best practices for encryption from web<-> specific client
I'm also confused about why you are encrypting the data again within an SSL stream.
Mar
29
comment Best practices for encryption from web<-> specific client
within what limitation? are the 6 steps the limitation or the thing you want to improve?
Mar
27
comment What kind of backdoor can be made after hacking wi-fi?
difficult or not, the problem remains that the only way to do what you want is to either reconfigure the router or exploit an install malware
Mar
27
comment Are there any alternatives to EFS for transparently encrypting the contents of a folder in Windows?
your title says to encrypt a folder, but the body says the entire drive - which are you looking for?
Mar
27
comment What kind of backdoor can be made after hacking wi-fi?
Most routers have some kind of setting that allows access to the admin login page from the WAN interface (Internet). Turn this on, and you have access to the router. As for installing exploits, that would really depend on the router.
Mar
27
comment What kind of backdoor can be made after hacking wi-fi?
Being wifi, you could re-hack the wifi password, but that's not what you're asking
Mar
27
comment What kind of backdoor can be made after hacking wi-fi?
Once the wifi password has changed you lose access to the network - any backdoor would have to connect outwards from the network. You could think of the problem in the same way as "how do you plant a backdoor if you only get one shot to physically be connected to the network?" There are numerous ways to do this depending on your focus. Can you narrow your question down a little?
Mar
27
comment SSL cipher suite usage statistics based on captured data
the answer will be server OS-specific as well as web server-specific - voting to migrate to serverfault
Mar
27
comment Should Information Security staff have Local Admin and Domain Admin Privileges
It will really depend on your environment and what roles, access, and activity the InfoSec staff are supposed to have. In general, no, they should not have that access, just as no one should except for the designated admins of the organization. But, sometimes, the InfoSec staff ARE the admins, so they need access. Pleased edit your question to provide relevant details on your situation.
Mar
27
comment Should Information Security staff have Local Admin and Domain Admin Privileges
what do you mean by "Information Security"? Who or what are you referencing?
Mar
26
comment How can I stop this remote attack?
netstat should show more than that - use the -a switch to see everything? Then correlate with the most recent firewall log (the most recent port used). hopefully, something should show on port 2345.
Mar
26
comment Snort report - 1000+ alerts in 1 minute from port 5060
In general, 1000 bad connections in a minute, which then stop, isn't that big of a deal. Without any further data, I might say that someone misconfigured their VOIP server for a moment.
Mar
26
comment Snort report - 1000+ alerts in 1 minute from port 5060
There isn't a lot for us to go on - the source port is 5060, which is SIP/VOIP, and it's coming from Portugal. Is there anything else you can tell us?
Mar
26
comment What Firefox settings should be changed from factory defaults to ensure privacy vis-à-vis Mozilla?
I went for the platform independent option, but, I also agree with you that I'd prefer Mozilla over Google for privacy. The question was about avoiding Mozilla, not privacy in general :) (checks overhead for a joke that might ben passing me by)
Mar
26
comment What Firefox settings should be changed from factory defaults to ensure privacy vis-à-vis Mozilla?
make the executable a symlink to Chrome?