19,409 reputation
33677
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 5 months
seen 5 mins ago

Security Architect


Mar
26
comment How do nested vpns through VM work?
That is going to depend on how you have set up your networking, actually. I think the deeper answer to your question is, "how do I set up the nested VPN so that it uses the parent VPN as a native network connection?" That's going to depend on the VM technology used and how you have configured the host. For that question, you will find more experts on ServerFault.SE
Mar
26
comment AES or Serpent-Twofish-AES
how does one encrypt money?
Mar
26
comment How do nested vpns through VM work?
If I understood your setup, then your diagram is not accurate. You are tunneling VPN2 within VPN1 (assuming the appropriate network setup). Then for question #1, which IP are you asking about?
Mar
26
comment Anti-virus anonymity question
@pseudon the problem is the question being asked. The question can simply be boiled down to, "am I leaking information by using an AV URL checker?" and he answers his own question. How the VPN concern and the AV concern intersects is unclear in the question.
Mar
26
comment Anti-virus anonymity question
I think you are co-mingling ideas here. First, the reasons why VPN logs are not desirable, second, the potential of "monetization of clickstreams" by the AV vendors.
Mar
25
comment Could antivirus programs not just scan all files upon creation?
what about when a file modifies itself to become malicious?
Mar
25
comment How can a very small company handle PCI-DSS requirement 6.4.2?
Technically, you are correct that a 1-person shop would not apply, but you'd need to talk to your QSA for a final ruling.
Mar
25
comment “It is safe if only Port 443/HTTPS is accessible from Internet!” Is it?
I've read your question a few times and I'm confused: what is the proposed solution/problem? Exposing a port without any firewall or protections? Is the vendor objecting to being put into the DMZ? What's the question here?
Mar
25
comment DMZ-Hosting for VOIP services…To Use or Not To Use?
I really appreciate that you disclose that you are a vendor! Unfortunately, this answer doesn't really address the question, and your post comes across as marketing and not a solution to the expressed problem of the OP.
Mar
25
comment “It is safe if only Port 443/HTTPS is accessible from Internet!” Is it?
the port doesn't matter, what matters is the security of the service answering that port
Mar
25
comment What is Satisfiability Modulo Theories
Is that theory supposed to help discover 0-days? You do not provide context to your question. Also, I found no reference to "Z3 solver". Could you provide links to sources talking about your topics?
Mar
25
comment Has an antivirus ever failed to detect malware for “non-technical” reasons?
I'm not sure any AV vendor would admit to that.
Mar
25
comment Audio not playing on Android (Kitkat 4.4.2 on LG G Pro 2 D838) via HTTPS
This is a Chrome support question, not an InfoSec question.
Mar
25
comment Strange requests to web server
I'm not sure this applies to the OP. Can you specify why this D-Link vulnerability applies?
Mar
24
comment Is this the most secure encryption/hashing system?
You've described a less secure OAUTH system? What is gained by hashing on the remote server? Are you aware that knowing the hashing algorithm or salt is not supposed to reduce the security of the password?
Mar
24
comment Is it possible to install spyware in password protected android phone?
I haven't heard about these Bluetooth malware. Can you provide links?
Mar
23
comment Meterpreter and staged payloads
Very clear and focused question!
Mar
23
comment Contact form without validation
I'm not sure how this answer differs from the other answer and comments.
Mar
23
comment Is it illegal to access a public file that contain private information?
I also debate that the question is a "legal" one, regardless of the use of the word "illegal". One could say that the question is more general, in terms of "how much trouble am I in?", which could be on-topic. This is something that I brought up in the DMZ.
Mar
23
comment Is it illegal to access a public file that contain private information?
As I clearly mentioned in my answer. My answer isn't a legal answer, but includes potential legal implications. As the OP also mentioned that he was looking for unauthorized access, I felt that it was cogent to discuss that.