13,550 reputation
11959
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 10 months
seen 1 min ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


2d
comment Setting up VPN connection for devices behind firewall
You are still giving us nothing to work with. We would need more details on the network topology to help. But even if you supplied that, your question is not on-topic for this site. This is a networking question.
Oct
16
comment Disabling SSL 3 on Chrome on Windows 64bit
This isn't a POODLE question, it's a client software settings questions and not a good fit for this site.
Oct
16
comment Is there a tool to verify if the Google SafeSearch is working on my Google account?
This is not an Info Security question. Do you want to know if it is 100% turned on or going to be 100% effective? To know that it is on, simply look at the settings (that's a software question). To know that it is 100% effective, you have to talk to Google Support (a vendor question).
Oct
15
comment Does Firefox support TLS on non-standard ports?
a packet capture would 'prove it'
Oct
15
comment How to handle legacy website account login credentials
as part of the process, also consider enabling MFA on sites that support it (and where it fits your needs)
Oct
15
comment How to handle legacy website account login credentials
Ah. Then could you update your question to reflect the 'process' instead of 'product' nature of your question?
Oct
15
comment How to handle legacy website account login credentials
Although I understand your concern, this question isn't specifically about Info Security. It is either a 'product recommendation' question, or a question about how to script the automation process.
Oct
15
comment What are the differences between ntlm, basic and digest authentication mechanisms in terms of security?
What research have you done on your own? This question could be answered with a simple wiki lookup ...
Oct
15
comment Metasploit - post script help
This question is better suited for a Metasploit forum.
Oct
15
comment Where can I find the latest penetration testing fuzzing list?
The edit doesn't change the problem with this question.
Oct
15
comment Based on these email headers, where is this virus coming from?
@Jeremy but emails can contain attachments which contain viruses...
Oct
15
comment Why is VeraCrypt more secure than TrueCrypt?
The problem is that this is not public scrutiny: this data is from the author. I believe my point is still valid. In order to answer your question "what evidence that VC is more secure than TC," we need code review and testing. It's great that the author provides this info, but it is not relevant to your stated question. If your underlying question is answered by this, great, but then I suggest modifying your original post.
Oct
14
comment What is the name for “imperfect” verification options?
"nondeterministic" is likely the place you need to go, but I have not heard of a conceptual term to cover what you're asking.
Oct
14
comment What is the name for “imperfect” verification options?
"biometric" or are you expanding the scope or conceptual layers?
Oct
14
comment Why is VeraCrypt more secure than TrueCrypt?
The problem with your question is that there isn't enough for us to work with. We need to perform a code review in order to answer your question. We need either specific questions (like my proposed question) or enough details to work with a general question. Why is it more secure? Because more iterations. Is more iterations more secure? Depends: ask the crypto experts, or let us delve into the guts if the rest of the app. Either way, your underlying question is difficult to answer.
Oct
14
comment How secure is HMAC
have you read the OWASP guides on this issue? owasp.org/index.php/REST_Security_Cheat_Sheet
Oct
14
comment Why is VeraCrypt more secure than TrueCrypt?
Then perhaps your questions needs to be fleshed out? Perhaps, "how is 327,661 iterations of the PBKDF2-RIPEMD160 algorithm demonstrably more secure than 1,000 iterations"? In which case, you might need to migrate this over to crypto.SE
Oct
14
comment The project Bully (reaver alternative) WPS vulnerability assessment utility
Sure, Bully might be a threat, but your question about Bully is off-topic.
Oct
14
comment Web Services Testing
REST is a design approach and not a technology. There are no 'tools' to specifically test REST. You need to understand how REST was implemented and design a testing method from there.
Oct
14
comment The project Bully (reaver alternative) WPS vulnerability assessment utility
You could do a little digging on Git. You will see that the user bdpurcell no longer exists, but there are forks on Git for bully.