17,650 reputation
23275
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 3 months
seen 15 mins ago

Security Architect


2d
comment Know username who is working on remote desktop
This is a Remote Desktop and Windows question, not an InfoSec question.
2d
comment Audio not playing on Android (Kitkat 4.4.2 on LG G Pro 2 D838) via HTTPS
This is a Chrome support question, not an InfoSec question.
2d
comment Strange requests to web server
I'm not sure this applies to the OP. Can you specify why this D-Link vulnerability applies?
2d
comment Is it possible to track the email sender with the email headers?
yes but only to some extent - have you read an email header and does it provide what you're looking for?
Mar
24
comment Is this the most secure encryption/hashing system?
You've described a less secure OAUTH system? What is gained by hashing on the remote server? Are you aware that knowing the hashing algorithm or salt is not supposed to reduce the security of the password?
Mar
24
comment encrypting chip data and accessing from other platforms
Is this more of a question for the developers of the "Android encryption app"?
Mar
24
comment Port mirroring with A LOT of Drops Tx on a 5406zl
This is in no way an InfoSec question
Mar
24
comment Is it possible to install spyware in password protected android phone?
I haven't heard about these Bluetooth malware. Can you provide links?
Mar
24
comment Locking down internet activities
programmers tend to want to do things like download things, like code, binaries, tools, etc. Is that kind of downloading in scope?
Mar
24
comment Locking down internet activities
If you do that, then you effectively bypass the proxy with a backdoor. The effect of that is going to be highly specific to your environment and policies.
Mar
24
comment Seafile putting mysql access passwords in clear text in multiple files
Thank you for adding context
Mar
23
comment Meterpreter and staged payloads
Very clear and focused question!
Mar
23
comment Contact form without validation
I'm not sure how this answer differs from the other answer and comments.
Mar
23
comment Is it illegal to access a public file that contain private information?
I also debate that the question is a "legal" one, regardless of the use of the word "illegal". One could say that the question is more general, in terms of "how much trouble am I in?", which could be on-topic. This is something that I brought up in the DMZ.
Mar
23
comment Is it illegal to access a public file that contain private information?
As I clearly mentioned in my answer. My answer isn't a legal answer, but includes potential legal implications. As the OP also mentioned that he was looking for unauthorized access, I felt that it was cogent to discuss that.
Mar
23
comment Understanding and trying out buffer overflow attacks
exploit-db.com
Mar
23
comment Understanding and trying out buffer overflow attacks
you could scour exploit-db for stack overflow vulnerabilities and that would include different OS's and proof of concept code
Mar
23
comment Is it illegal to access a public file that contain private information?
"I was testing to see if they have any vulnerability" - so you were poking around in areas where you knew you weren't supposed to be. ALWAYS get permission before testing.
Mar
23
comment Is it illegal to access a public file that contain private information?
Did you have permission to test?
Mar
23
comment Website Link in Signature corrupted while transmission
Also, why does a bad link in a signature result in bounced emails? Are they bouncing to all destinations?