21,955 reputation
44285
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 3 hours ago

Security Architect


Jul
24
comment Don't store passwords in database?
@Snewman8771 "hashed and salted" solves the simple password problem.
Jul
24
comment Don't store passwords in database?
If that is truly your question, then this isn't an InfoSec question. "Where to store" properly hashed and salted passwords is merely a programatic issue and not a security one. Because you asked it here, and because your link quickly talks about hashing (and you don't), it is understandable that the simplest answer is "hash".
Jul
24
comment Hacker using my wifi connection to try to log on?
We can only guess at this point. It is possible that you picked up malware on your phone or computer. You might have used an infected wifi connection and someone sniffed your credentials.
Jul
24
comment Securing a Linux Computer
The term you are looking for is "hardening". Specifying "Linux" is too broad as different distros can use vastly different architectures.
Jul
24
comment Apply GPO to Group and Computers
As this is a Windows-specific implementation question, I'm voting to migrate.
Jul
24
comment How to decide software flow / business process is secure enough
"secure enough" is a function of the threats you expect
Jul
23
comment Tools for finding stored XSS vulnerabilities, given DB write access?
Your list of tools indicates that you might need to expand your scope of vulnerability scanners. Try this list that ranks them by effectiveness to see if something there meets your specifications: sectoolmarket.com/…
Jul
23
comment Actual use of covert channel in malware
@raz is correct. Given the reference the OP made, it is an inter-process channel: en.wikipedia.org/wiki/Covert_channel#TCSEC_criteria
Jul
23
comment Why is Rabin encryption equivalent to factoring?
I also think you might find more help over at crypto.stackexchange.com
Jul
23
comment Why is Rabin encryption equivalent to factoring?
It is helpful if you link to the references you make.
Jul
23
comment Freedom method for anonymity
I did a search for "chain Anonymous Internet Proxies" and came up with multiple results. Would those results answer your question?
Jul
22
comment Obtaining large data sets for research: MySQL, PHP, Apache, etc
I had a similar problem to start with, but my servers got on the "right" hacker lists at some point.
Jul
22
comment How secure is socks5 proxy over ssh?
I'm not sure what your question is?
Jul
22
comment Obtaining large data sets for research: MySQL, PHP, Apache, etc
Frankly, I'd host a small web app on a free web service and post the IP/URL in various spots (Pastebin, forums, etc.) and gather the logs from that. I've done the same thing for my honeypot projects. You would have full control over the context, and you can generate valid traffic and behaviour in a controlled manor.
Jul
22
comment Obtaining large data sets for research: MySQL, PHP, Apache, etc
These log files can only be understood in context. I'm not sure a random dump of logs from an unknown implementation would be helpful. For instance, any connections to my webapp from Elbonia would be considered suspicious, but not so for an Elbonian webapp. You are also relying on the logging level and error handling to be consistent and correctly configured. Other than that, there are known anomalous patterns that would be common to most situations, and you don't need other's datasets for that.
Jul
22
comment Is it helpful to have a captcha on a login screen?
Locking out IPs can be very problematic for customers if they share an IP (corporate users, etc.)
Jul
22
comment Unsure if I have understood Hydra syntax correctly?
I'm confused. You have a syntax that works and an indication that hydra changed their syntax, but you still want to know why the old syntax doesn't work?
Jul
22
comment How can LPWA get implemented
A Google search is coming up with rich results.
Jul
22
comment What are the pros and cons of a VPN for privacy
You also copy/pasted all this from the link you provided (including errors).
Jul
22
comment What are the pros and cons of a VPN for privacy
I don't think this answers the question. You are discussing the benefits of a specific VPN software instead of the idea of a VPN itself.