12,535 reputation
11754
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 9 months
seen 11 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Apr
30
comment How to scan a website using Nessus with login credentials
Munkeyoto has the right idea, but the wrong section. There's a section for basic authentication.
Apr
30
comment Website starting up on PC boot
There are free anti-virus tools that you should also consider using, if paid options are not an option for you. No AV is perfect, but it looks like you need all the help you can get.
Apr
29
comment Security Awareness Training Ideas
Asking for vendor recommendations will tend to get a question closed down.
Apr
29
comment Is it possible to block specific users that connect to the internet behind of same gateway with NAT?
As I mentioned. But if the unwanted traffic remains on a single port, you can filter by that port.
Apr
28
comment Configuration settings for sessions in php
Try not to ask multi-questions. Split this up over 3 questions and you might get better results.
Apr
28
comment How to get top management support for security projects?
I can't begin to emphasize how bad this is as an approach.
Apr
28
comment How to get top management support for security projects?
Speak business to the business.
Apr
28
comment Transparency Report Standards
+1 for Privacy Officer and lawyer. Reports answer questions. You include in the report only the answers to the questions you are required to answer. This needs careful guidance.
Apr
28
comment Why does a business need to secure its email system?
Your questions are FAR too broad for us to answer.
Apr
28
comment Why does a business need to secure its email system?
Are these homework questions?
Apr
28
comment What are the security impacts of securing with WEP?
Do you know about WPA and how it is better than WEP?
Apr
28
comment What are the security impacts of securing with WEP?
I'm confused by your question. Are you asking why a business would want to secure at all, or what the risks are of securing with WEP, specifically?
Apr
25
comment What are the implications of an overly-restrictive password policy?
@mcgyver5 Agreed, and the password field on the database is hard-coded at 8 chars (so, old).
Apr
25
comment What are the implications of an overly-restrictive password policy?
It means they aren't using a standard library for passwords but rolling their own. The restriction of $ and # confirms it. The repeating letters restriction is a 'feature' that the programmer thought up, so he does a very basic look-ahead search at each character to see if the next character is the same. The problem then is "what ELSE is poorly programmed in this security sub-system?"
Apr
25
comment What to focus on in Cloud security?
The point of a scholarly research is to sift through the mess to focus on what is relevant. This is your first day, be patient. Keep reading. Your focus on IaaS/PaaS is STILL too broad. Keep reading and you will find an avenue to explore that will help you focus.
Apr
24
comment Access control on a primarily windows LAN
It looks like you are caught between the 'theory' and 'practice' forums. I can give general guidance here but for specific implementation, you'll need to consult the appropriate forum (Serverfault)
Apr
16
comment How to make a captcha maker
Have you reviewed the design of established CAPTCHA APIs?
Apr
16
comment Kohnfelder Certificate
Can you edit your question to include all this background?
Apr
16
comment Pattern extraction
I'm not sure that this question is suited for this forum. This is not a security question, but a simple programming/scripting one.
Apr
16
comment Kohnfelder Certificate
Kohnfelder wrote a thesis in 1978 from which we have standards like x.509. Your question supposes that his thesis is a standard that can be compared.