21,963 reputation
44285
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 8 months
seen 21 mins ago

Security Architect


1d
comment Alternative to ICANN DNS
Many organizations run their own internal DNS servers to redirect their internal users to non-standard IPs for common things like porn or other sites that are not allowed by the organization.
1d
comment Alternative to ICANN DNS
I'm not sure there is a security question here.
1d
comment Alternative to ICANN DNS
your local hosts file is not controlled by ICANN, for example.
1d
comment Reverse engineering of a global hash salt from known plaintext and hash
FYI: A salt used for every hash is sometimes called a "pepper".
1d
comment Reverse engineering of a global hash salt from known plaintext and hash
A lot of databases also store the salt, but I don't think that fact affects your question.
1d
comment Reverse engineering of a global hash salt from known plaintext and hash
So, you want to brute force the salt from a known plaintext and known hash.
Aug
1
comment Using a index.php script in my iOS app, what should I do to secure it?
I think this is where the term "shutting the barn door after the horse has left" applies. You need to rethink how users access this script.
Jul
31
comment Does MEGA cloud service say ALL the truth?
Then I'd suggest editing your question. As you can see, the Answers are addressing the "what method can be used to know ..." question.
Jul
31
comment Yahoo mail hacked - how to recover, how did it happen and how to prevent?
much better, thanks!
Jul
31
comment Using a index.php script in my iOS app, what should I do to secure it?
If I understand you correctly, you have a PHP script running on an open server with public access and it permits database access. It is now at this point you want to secure the PHP script?
Jul
31
comment Does MEGA cloud service say ALL the truth?
I think you answered your own question: a 3rd party audit.
Jul
31
comment Forwarding an SSL connection
I'm finding your Answer confusing, I think because you leave out some details. Can you flesh out your Answer a little more?
Jul
31
comment How can I uniquely identify an user when cookies are not an option?
This is a link-only Answer. Can you pull out some relevant details to include in your answer in case the link goes dead?
Jul
31
comment Forwarding an SSL connection
The cert in question is the client cert.
Jul
31
comment Just how intrusive IS Cortana?
@soong has it right. You asked yes /no questions, but we can only guess at this point.
Jul
30
comment Just how intrusive IS Cortana?
This will be very difficult for us to answer. This is more of a Microsoft question since Cortana is still so new.
Jul
30
comment Can data be tampered with after expert clones a drive?
The photos of the hashes are still valid (they will also have timestamps). Your description is a normal and forensically valid technique.
Jul
30
comment How to handle the aftermath of a possible firewall compromise?
It's going to be impossible for us to know what happened without more data, and neither are you. If you lost the logs, you've lost the data you need to investigate. For next time, I'd transfer your logs to another server in real time so that they remain intact after a compromise.
Jul
30
comment LAMP MailServer without SSL… so what's the problem?
Your #2 is going to get slammed: it is blatantly false. So, your #1 is obvious: everyone with access to the data stream can read your emails.
Jul
30
comment Input Sanitization vs Output Sanitization
That said, Todd, could you add some notion of scope to this question?