21,060 reputation
33982
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 7 hours ago

Security Architect


2d
comment When did development on various TLS versions begin?
have you looked at the RFCs?
2d
comment Metasploit new exploits failed
You have a technical support issue and not an exploit issue. It is likely a problem with your install. Re-install.
2d
comment How do you detect a virus in an image
Short answer: run an anti-virus scan.
2d
comment How do you detect a virus in an image
Please have a look around this site. You will see that your question does not fit the scope, tone, or format of any other question here. Please do some research first and re-post when you have a specific question.
2d
comment A cctv system for a small shop
You need to discuss this with a security camera vendor or consultant. Not every answer is available on the Internet.
2d
comment LastPass authentication grid hacked on June 15?
I'm confused. Are you asking what the grid is for? How does the breach on June 15 affect the question?
2d
comment LastPass authentication grid hacked on June 15?
It depends on what your threat actor you want to protect yourself from. If I can't use a phone, I'd prefer a printout than to do nothing at all for a 2nd factor.
2d
comment attack on Unix procmail analysis
How did you try to download the malware? wget or a browser? It's possible that the target site inspects browser strings. Otherwise, yes, your analysis seems fine.
Jul
3
comment Is it true that breaking into the https padlock settings on a web page is easy to do?
In that link's case, nothing is cracked, you just don't have a TLS connection from end-to-end - you have a proxy. Your browser will tell you that the certificate that encrypts the channel doesn't match the destination. It's not possible to be a man-in-the-middle without this kind of alert.
Jul
3
comment Why am I getting the message that Security Stack Exchange is only partially encrypted?
I think we need more to go on. Can you show the message? Can you describe your environment?
Jul
3
comment Best method for securing text based messages
do you have evidence for this message retrieval claim?
Jul
3
comment HTML Sanitization
@IsaiahZwick-Schachter OWASP is going to be your friend, then.
Jul
3
comment HTML Sanitization
Have you done any research into this topic?
Jul
3
comment Best method for securing text based messages
This is a very broad question with many answers. It might be helpful if you also explained your constraints .
Jul
3
comment Receiving random numbers in GET request query string. Exploit?
You are going to get a lot of seemingly random garbage being requested. Is there something specific that you are concerned about?
Jul
3
comment How to track who created a fake Gmail account using my name
What you are asking is to "prove a negative", which is impossible. You can show that your main Gmail account is another account, and therefore you would not have created a new one, with your name, just to send this unfortunate email.
Jul
3
comment Is a ZIP file password easy to break?
Good catch on the file size! Yeah - I call BS on the video. Nothing has been cracked. In fact, it might have nothing to do with the particular program he used to zip or to create the self-extractor.
Jul
3
comment Is a ZIP file password easy to break?
Question is much better. I retracted my votes and Phillip has your answer.
Jul
3
comment Is a ZIP file password easy to break?
I, too, would have liked to have seen the files actually accessible. The self-extractor may have simply build the directory structure and not decrypted the files.
Jul
3
comment Affordable FIM, log monitoring, policy enforcement/checking, IDS?
I'm not sure it does log monitoring and policy enforcement. It's more of a dedicated FIM.