12,026 reputation
11651
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 7 months
seen 18 mins ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Jul
14
comment What are the benefits of IP Whitelisting?
For instance, the number of probes dropped by 90% once I whitelisted by geo-ip. There is more to whitelisting than 'hiding'.
Jul
14
comment (How) Can outsiders discover the pages that are being hosted on my server?
And just like passwords, paths can be brute-forced. Crawlers use dictionary lists to try common directory names and try to map out an entire website, even if there are no links to those locations.
Jul
14
comment Is it possible to track a missing brand new phone?
@Gilles The OP's question is how to track a phone that the OP has never had his hands on. The most that can be done is for the police to coordinate with telco's to retrieve stolen merchandise.
Jul
14
comment Order of authentication and authorization
You were authenticated as you, but not authorized to SU to that particular account. Right? You would rather be authenticated first and allow brute force attempts to log in as that user?
Jul
14
comment Is it possible to track a missing brand new phone?
Why track it? Work with the vendor to replace the missing merchandise. This is a shipping problem, not a security issue.
Jul
10
comment How did my network admin identify my iPhone and how can I hide my ID?
Where is the MAC/email account pairing made? I'm really not sure about this answer being accurate.
Jul
10
comment Is an Antivirus scan via network share equivalent to an offline scan of the system?
I remember references to malware moving itself to memory and off of the drive, but then writing back to drive on shutdown. I will have to look for that.
Jul
10
comment Exchange 2013 blocks txt file attachments - are there security reasons?
I'm with you - I've been supporting email for 13 years and I've never heard of a risk (except for parsing vulns).
Jul
10
comment 2 simultaneous VPNs to 2 different nodes
I found 3 questions on this very site. "Try Harder"tm.
Jul
10
comment What are the webmalware effects on Windows XP?
If you take snapshot of a VM, you can 'rollback' a VM to the snapshot's point in time. Google "revert snapshot"
Jul
10
comment What are the webmalware effects on Windows XP?
Toolbars get installed outside of the downloaded Internet files folders, and homepage changes are made to the user's profile, which is also outside.
Jul
10
comment 2 simultaneous VPNs to 2 different nodes
What did your Google searching tell you?
Jul
10
comment Preparation for Blue Team Competitions
There have already been numerous questions here about the same thing: "What's the definitive text?" If you search you will find them. You will also find that the answers are not helpful because the question is too broad. There IS no definitive text. Even narrowing the focus to 'network security' there is simply too much to know in too many areas. Consider that the CISSP certification requires understanding of 10 different knowledge domains. You can't condense "security" to a single text.
Jul
9
comment How do I customize /proc permissions?
Intelligent != knowledgeable. If they don't know, then they don't know. Once they do, then they do.
Jul
9
comment Software for web hacking?
A static page is not vulnerable to those things.
Jul
9
comment Software for web hacking?
No, of course not. They need to be VULNERABLE to those things, first. Listen, you need to go do some very basic learning first before you do anything else. Go spend an hour reading on xss, for instance. Ask questions after you have a foundation for them.
Jul
9
comment Software for web hacking?
Google has a education site for XSS, SecurityTube has tutorials, books are plentiful. You are beginning so pick one thing and move forward with that until you know where you want to go to next.
Jul
9
comment Is it possible to use bitcoin miners to decrypt files/communication?
you underestimate the computing power required to brute-force encryption ....
Jul
9
comment Is it possible to use bitcoin miners to decrypt files/communication?
It's called 'distributed computing' and it's been done for years.
Jul
9
comment how to scan a web application that uses Captcha
Ask the devs for a non-captcha version of the site for testing? That's what I do.