12,036 reputation
11651
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 7 months
seen 11 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Jul
22
comment Sign contents of entire computer?
Would a hash work just as well? You could hash the entire contents before you are away from your computer then verify when you get back?
Jul
22
comment CLI API that requires plaintext user details
So, the data supplied by the client have to match the data stored on the server? Sounds like the same problem that password has. How is the password model not the same as your situation? Transmit hashes of the data? What about shifting to Asymmetric Keys instead?
Jul
22
comment PDF Digital Signature
Sounds more like an Adobe support question than an IT Sec question.
Jul
22
comment Security sanity check
Your development team should not be rolling their own encryption processes at all in any event, but certainly not when they don't understand PKI 101. Your recommendation should simply be to follow industry standards. You just have to prove the costs of such a scheme are no more than their proposed solution.
Jul
22
comment How to tell if my laptop is being spied on
One word: mitigation. There is no such thing as perfect security, but you can mitigate the risks.
Jul
22
comment How to tell if my laptop is being spied on
You are already doing what you need to do to determine what data is being sent from your computer: Wireshark. My guess is that you aren't sure how to derive relevancy from the data Wireshark is giving you, which is an understandable frustration. My advice is to keep working along the Wireshark path.
Jul
22
comment How to tell if my laptop is being spied on
Traffic to *.nl and *.ch are perfectly valid if you live in those countries...
Jul
22
comment How to tell if my laptop is being spied on
This question is all over the map. The technical aspects are a distraction from the core question, which seems to be "How can one know they have privacy?" That question has been answered in many ways here on this site. In short, you can't prove a negative (no one has seen my communication), but you can monitor the positive (what I am leaking).
Jul
22
comment Edit/Remove Timestamps for files and file system
The commandline answer is here: stackoverflow.com/questions/582553/…
Jul
22
comment Edit/Remove Timestamps for files and file system
Re-writing timestamps is one thing, but to block all future timestamps is not feasible. Timestamping is built into all OS's. IT's kind of important.
Jul
22
comment Security sanity check
According to the design, the client needs to check on the server's public key for the private exchange. How is that different than HTTPS? Unless they were hoping that by encrypting the public key (?!) the client wouldn't need to check with the CA ...
Jul
21
comment How to store hexencoded ciphertext in Java
This is a Java-specific programming question, not a security question.
Jul
21
comment How to configure Proxychains in backtrack?
Have you tried the BT forums: backtrack-linux.org/forums/showthread.php?t=1496
Jul
21
comment How does Network Address Translation (NAT) increase firewall effectiveness
this looks like a homework question ...
Jul
21
comment Using Free AV to meet PCI Requirement 5
Along with Tim's answer, you might have to cobble together a compliant setup with free AV, but it should be possible, with the right software.
Jul
21
comment Using Free AV to meet PCI Requirement 5
Central logging is a good point. You might be able to rig something up with shipping logs to a collector.
Jul
21
comment How to use the Suricata IDS to monitor the entire network?
Is your router acting as a switch and preventing PC1 from seeing the traffic? This is not a Suricata problem, but a very basic networking design problem.
Jul
17
comment Inspect packets coming over Linux-based bridge, and run scripts when certain conditions are met
Ettercap is used in a similar way. Is that in line with what you're looking for?
Jul
14
comment This protocol is vulnerable, but why?
I can see that Bob doesn't identify himself, Alice identifies herself and communicates the key (though hashed) to an unidentified party, who then sends it back. If Alice was communicating with Malory, Mal could spoof Bob.
Jul
14
comment What are the benefits of IP Whitelisting?
For instance, the number of probes dropped by 90% once I whitelisted by geo-ip. There is more to whitelisting than 'hiding'.