14,080 reputation
12162
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 11 months
seen yesterday

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Jun
30
comment Why isn't it possible for a third party to decrypt HTTPS traffic?
Unless the key that is sent is also encrypted :)
Jun
28
comment What tools on unix can scan sql dumps for malware?
You want to check the contents of your sql data for malware, spam, as well as injected code? Tall order. When you say that you have attempted it, can you be more specific? This question is a bit vague.
Jun
26
comment Credential In Windows
Do you mean all user account passwords, even ones you do not control?
Jun
25
comment Is This A Website Attack/Vuln Test?
I'm not seeing any SQL stuff there. How did you come to your conclusion?
Jun
25
comment Anyone seen weird messages in their logs?
Or the logs got corrupted ...
Jun
25
comment How to properly anonymize data, if hashing isn't enough?
This is the same as Lucas's tokenization?
Jun
24
comment digitally signing a document
There are digital signature products on the market that do all of this, even integrate with Office. Copy/Print/Document equipment vendors (Xerox, Ricoh, HP, etc.) often have a solution.
Jun
24
comment Password strength and banks 4 pin code?
Do you mean a short PIN to use the card, or to access your account online?
Jun
24
comment How effective is Windows Task Manager at identifying keyloggers?
Keylogger processes can be named like known Windows processes, or can inject themselves into valid Windows processes.
Jun
24
comment Public facing computers in a Media Lab
lol - marked as answer but no upvote. Oh well.
Jun
24
comment Can't log into Windows, mac-spoofing issue or malware?
This is more of a comment than an answer
Jun
24
comment Can't log into Windows, mac-spoofing issue or malware?
Home network or corporate? Active Directory? Installed security software? Do you have network security running on your network? I can reproduce this problem if the MAC changed and my network rejected all communications from the unknown MAC, including connections to the AD server.
Jun
24
comment Hardware trojan besides network card?
You assume the main goal is to have active communication with the trojan
Jun
24
comment Hardware trojan besides network card?
Define "damage". Physical damage? Information disclosure? Unauthorized access?
Jun
24
comment Mobile authentication
I would also add, "if you have to ask if it is worth the effort, then for you it isn't". Biometrics is hard, with an unreliability factor. Unless you have a specific reason for engaging in biometrics, look elsewhere.
Jun
23
comment Aren't password managers still incredibly risky?
@StephenTouset You are correct about 1Password, it uses Dropbox for syncing.
Jun
23
comment Aren't password managers still incredibly risky?
@StephenTouset LastPass and 1PAssword store your passwords in their servers. Keepass creates a local file that you can sync to Dropbox.
Jun
23
comment Aren't password managers still incredibly risky?
A risk you always take. But I have never seen a company simply shut its doors one day without any announcement to extract your data.
Jun
23
comment Aren't password managers still incredibly risky?
All the password managers that I know of are free.
Jun
23
comment Aren't password managers still incredibly risky?
The password manager can alert you when a password has reached a time threshold. They do not change the password for you, but tell you when you need to change it (and then create one for you). You still need to click on the 'change my password' link.