19,678 reputation
33677
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 5 months
seen 2 hours ago

Security Architect


1d
comment How to get into penetration testing profession?
possible duplicate of Penetration Testing Jobs without Experience
1d
comment How to get into penetration testing profession?
I have never heard of a PenTesting intern. Mostly, people are hired who can already do the job. It's very simple to gain experience yourself by running your own test networks and working through tutorials, testing pre-made applications designed for learning, etc. Please search this site for guidance on who to gain that experience.
1d
comment Does it make sense to scan localhost site?
Why does wpscan need to be run over the network? It tests for WP plugin versions. That can be done on local host.
1d
comment How do you restore your hard drive after a crash if you use KeePass?
@Chloe please edit your question to reflect your clarification
1d
comment Does it make sense to scan localhost site?
I'm not sure what you're asking. Have you tried wpscan on your local host? Do you want to know how to scan a localhost address? Are you asking about tools besides wpscan?
1d
comment Hijack attacked SSL/TLS-connections?
If you can decrypt the live stream while in the middle, then you could easily inject javascript just like the Great Cannon. Are you asking about the likelihood of being able to decrypt "at speed" in order to do this?
1d
comment How to be safe from wifikill!
If your friend is abusing your wifi connection, he has breached your social contract of cooperative use of a shared resource. Change the wifi password and drop his access to your wifi.
1d
comment How is it possible that a text message can reboot an Apple device?
@ChrisCirefice exactly - the old bug has been patched, but the OP was asking about how a parsing bug would work to crash an OS
1d
comment How is it possible that a text message can reboot an Apple device?
there are many articles about this: reddit.com/r/apple/comments/37enow/…
1d
comment Detecting RDP on non-standard ports
OP clearly states that he wants a network-level ability to monitor, not systems-level monitoring.
1d
comment How do you restore your hard drive after a crash if you use KeePass?
I'm very confused by this question. Was your KeePass store lost on the failed drive? Where does online backup come in? Is your question about generating passwords or restoring a hard drive?
1d
comment Can an employer see what I'm doing on my iPhone whilst logged onto wifi
not exactly true about whatsapp: whispersystems.org/blog/whatsapp and not true for iMessage: techcrunch.com/2014/02/27/…
1d
comment Saving user data (IP, location…) on mobile app in USA
@S.L.Barth actually, this question is about privacy legislation, which touches InfoSec. Google Analytics has the same problem and their decisions might be a good guide.
1d
comment How to fix a repeatedly hacked gmail account (where 2FA is enabled and passwords are changed)?
my first thought is 'application passwords' that bypass 2FA - are there any listed for her account? can she disable them?
1d
comment Do VPNs really mask your identity or is it a facade?
how does FREAK affect VPNs?
2d
comment Man in the middle attack on browser downloads
two words: lenovo superfish - trust on this point is a real concern
2d
comment How easy is it for hackers to gain unauthorized access to resources on an Android phone?
Nothing of the attack is explained. If the phone was rooted, then the normally security measures would be disabled and this type of compromise would occur.
2d
comment Do VPNs really mask your identity or is it a facade?
I'm not sure that a proxy has the same problem as a VPN (re: datagrams) - the traffic sent from a proxy would not contain data about the source (attribution is handled internally, often by using port translation). Is your focus VPN, or proxy, too?
2d
comment Do VPNs really mask your identity or is it a facade?
it looks like the OP isn't concerned with the content, but the attribution - if so, the computing power reduces significantly
2d
comment Is SSL over HIP (Host Identity Protocol) possible?
it looks like the 2 technologies are different enough that although it could be technically possible, that it might not practically work in a general sense. I'm curious to learn more, though.