21,955 reputation
44285
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 5 hours ago

Security Architect


Jun
11
comment Preventing phishing of few critical websites
The tool redirects users to a landing page. As I say, it is not (and cannot be) perfect.
Jun
10
comment Does using reaver crash or bring down a network
Page 8? sviehb.files.wordpress.com/2011/12/viehboeck_wps.pdf
Jun
10
comment How to look for steganography in a picture
Asking for tools to recommend is off-topic. Plus, the answer to this puzzle isn't a tool, but a process.
Jun
10
comment Hashcat does 1-7 numeric characters on brute force attack when specifying 8
answer found in the hashcat documentation: hashcat.net/wiki/doku.php?id=mask_attack
Jun
10
comment Is there a online filter to check email attachments?
Ah. You want something to scan before you download. This might not be necessary. It's ok to download as long as you do not open. Run Norton as normal.
Jun
10
comment Is there a online filter to check email attachments?
you could scan the file with your work PC's anti-virus or upload to an online virus scanner like virustotal?
Jun
9
comment Are these statements correct
I think, perhaps, you are taking the downvotes and feedback personally. No one is saying that you are stupid for asking the questions, but simply that this particular forum isn't set up for this kind of thing. There is a section in the FAQ about how to ask questions. In addition, you only disclose as a comment to an answer that the reason for these questions is to validate a product you are thinking about creating. As I mentioned, that might be great to put into your question for context.
Jun
9
comment Are these statements correct
But the technical aspects to your questions are easily answered with minimal research. Other than the basic technical points, you ask primarily opinion-based questions or subjective questions (% of corp users with encrypted emails, relevancy of email for communication). It's just difficult for this type of forum to answer.
Jun
9
comment Is it possible for an attacker to redirect a packet sent by a client, modify it then sent to original server
Why is your first point a challenge?
Jun
9
comment Are these statements correct
The problem is that there isn't a real question here - that's why the downvotes. It also looks like you are trying to build an argument for something without disclosing what you are really getting at.
Jun
9
comment Ensure that a file can only be decrypted after a specific condition is not present
As others said in the other question, it's not a matter of the cryptography, but about the software that does the cryptography. At that point, you can use whatever criteria that you want to. Also, it would be helpful if you cited your source for "secure triggers" for us to understand your perspective on the question.
Jun
9
comment Ensure that a file can only be decrypted after a specific condition is not present
this is a duplicate of a closed question: security.stackexchange.com/questions/91063/…
Jun
9
comment DDoS attacks targeting Android
Perhaps it would help if you explained what you know about DDoS. I'm not sure that any single device could have protection against DDoS.
Jun
9
comment Is it necessary to use SSL for MySQL?
Do users need to log in? Would it be "really bad" if someone changed the data displayed to end users mid-transmission? Is the SSL only for the connection between Apache and MySQL or between Apache and end users?
Jun
8
comment Are there any meta-formats for crypto?
The OP dismissed CMS in another answer. Also, this answer is very light on content. You might need to flesh this out.
Jun
8
comment How can I recover my encrypted data from a Sandisk Secure Access
Unfortunately, we are not tech support. If you recreated your passwords, then you likely wiped the existing files.
Jun
8
comment Security implications of static IP?
For instance, if a scanning bot is looking for weaknesses, finds your vulnerable port and enters you into a registry, then your record in that registry will continue to be valid. It might not matter in your situation, but the argument you state has more context to it.
Jun
8
comment Security implications of static IP?
I think the argument is better stated, "if an attacker finds a weakness, they can always return to your vulnerable port". That threat is up to you to accept or not.
Jun
6
comment Should cookies expire?
Do some searches for "cookie stealing" and take a look at the old attack "firesheep". Just remember the difference between "session timeout" and "cookie expiry".
Jun
6
comment Data security is not perfectly possible, laws exist but no one uses them. What is missing on international level?
You still haven't asked a cohesive question. "What to do" about what? What about regulatory standards like PCI-DSS, HIPAA, etc.?