18,247 reputation
23375
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 4 months
seen 2 hours ago

Security Architect


2d
comment Has anyone used this ICLOAK USB device?
I'm not defending the product, but I think you are overreaching in your critique. 1) I'm not seeing claims of being a "silver bullet", merely the "best available". 2) Yes, an encrypted stream might be detected, but that does not defeat privacy or anonymity. 3) They, themselves, advocate installing Tails on a USB stick. 4) Can you provide evidence of firmware eavesdropping that survives rebooting to an attached USB drive? If you can reboot the machine and trigger booting to USB, you do have a lot of control over the machine.
2d
comment Can you securely allow users to create VM's on their workstations
Perhaps you need to differentiate between "Virtual Machines" and "Virtual Containers" - Virtual Machines allow you to install OS's, Virtual Containers allow you to augment the existing OS. Suddenly dropping a Windows OS into a all-Linux environment could drastically change the security of the network.
2d
comment What is the alternative tool for Honeypots?
So, my answer is: don't use a pre-programmed honeypot - use a normal server and export the logs. Any attempt to connect or use the honeypot is an incident and it is completely undetectable as a honeypot. But, from your question, I have no idea if that answer is helpful or not.
2d
comment What is the alternative tool for Honeypots?
There are many kinds of honeypots, and not all are detectable because some are simply a real server in a fake environment. Can you explain what you want a honeypot to do?
2d
comment How is ECIES available in FIPS Validated libraries?
I'm using the language from the NIST list of "Validated Modules" of which BSAFE is one. BSAFE is a FIPS-Validated module with a non-FIPS algorithm.
2d
comment Extraneus message about security risk when I open a new Chrome tab
Your question is a little confused: it is both a phishing technique and an indication of malware installed (likely in a Chrome extension if it went away when you switch to Firefox). Aside from that, you should have a professional look at your machine to determine if the infection was greater than just the browser. Or just nuke your computer and rebuild (you DO keep backups, right?)
Apr
16
comment How to keep track of registry changes in a Windows based system
@windowslabourer yes, you have security applications, but the primary question is an API/Windows OS internal operation question.
Apr
16
comment Downloadable Autonomous System contact information
A quick Google search yielded: arin.net/resources/request/bulkwhois.html but frankly, I handle this situation by using a secondary internet connection to do a whois lookup
Apr
16
comment What protections are put in place to prevent rootkits from getting ring 0 access?
Wiki helps to explain: en.wikipedia.org/wiki/Rootkit#Kernel_mode
Apr
16
comment Decode Obfuscated Malicious PHP Code
I'm assuming that you truncated the code with ...... ?
Apr
16
comment attack on mysql for empty field
Ok - now why do you think that means that someone can attack your server?
Apr
16
comment Is cacert.org more harmful than self-signing?
you could inspect the new cert when they issue it
Apr
16
comment attack on mysql for empty field
Not every attack has a name
Apr
16
comment Decode Obfuscated Malicious PHP Code
@gowenfawr Should we make a canonical answer?
Apr
15
comment What's the best way to connect to a computer via IP address?
This is not an InfoSec question, but a very basic networking one.
Apr
15
comment What happens to a site that is NOT in trusted sites?
Although this is a privacy question, it might be a better fit over at SuperUser? It's highly specific to the internal workings of Windows.
Apr
15
comment If I use a VPN such as IP Vanish on my office network, can they see
Without knowing how your office has set up their IT infrastructure, we cannot answer this question.
Apr
15
comment SMBDirect & Metasploit
No piss, no coffee, no sarcasm. We are not tech support. This is a question about an error in a software package. We are not the place to ask for solutions, even if we may be very familiar with the tool. Some of us may be experts in child rearing, but questions about that are off topic, too.
Apr
15
comment Cookie based sqli
Please don't ask course questions here - you have the teaching staff to help you as well as the wealth of Google.
Apr
15
comment Payment form from http is secure?
You don't provide enough details, including what you mean by "secure enough".