14,609 reputation
12463
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 11 months
seen 20 secs ago

Security Architect

Owner of: SelfPhish.com


Nov
17
comment How many passwords should I have?
There is no way for us to know your life well enough in order to answer this question.
Nov
17
comment Can the Windows Schannel vulnerability be exploited by visiting a website?
Yep - you're right, but then you need to highlight that like you did in your final edit.
Nov
17
comment Can the Windows Schannel vulnerability be exploited by visiting a website?
Readers have to do a lot of inferring to understand what you are trying to say. Lay it out for them like you did in the comments. That said, it still doesn't answer the question. The OP isn't looking for defense, but for a direction on how to exploit.
Nov
16
comment Real time application of AES and DES
You're not asking about encryption, but about power consumption. That's not something we will typically have knowledge of. You'd need to ask hardware folks about this sort of thing. "Power consumption" is a function of CPU and memory load. That's where you'll want to look.
Nov
16
comment Can the Windows Schannel vulnerability be exploited by visiting a website?
ok but, how have you demonstrated that with your answer? All I see is steps you've taken and the effect on normal browsing.
Nov
16
comment Can the Windows Schannel vulnerability be exploited by visiting a website?
I'm not sure how this answers the question.
Nov
16
comment Do you really have to go to the extremes this guide says?
Even the article says that you don't have to go to those extremes.
Nov
16
comment Old e-mail text types itself back into PC later by itself?
MS Security Essentials is not a reliable AV solution. Even Microsoft advises to add another AV on top of Essentials. You can get free AV scanners and Live CD's.
Nov
14
comment Masking IP address and port number for Web application
DNS works for IP, ports are not a consideration. Do you want to mask the port, or are you worried that by using port 89 that DNS won't work?
Nov
13
comment Is Adblock (Plus) a security risk?
At best this is anecdotal evidence. Are you sure that you installed The real AdblockPlus from adblockplus.org? This isn't really an answer (yet).
Nov
13
comment Finding Plaintext Password Repositories
You would need to have some common thing to search for. I'm not sure there would be in this case. Your stated goal is to find files that could contain any kind of data: usernames and passwords, which would be unique between people by definition. At best, search for files labeled "passwords".
Nov
13
comment Data Abstraction Layers in Forensic Imaging
I'm not sure this answer address the question.
Nov
13
comment Proper way to allow access to systems within different offices?
The other problem the OP has is that there is no direct connection to the target from the remote user. It's not an authentication problem, but a logical access one.
Nov
13
comment Proper way to allow access to systems within different offices?
"Trivial" to spoof IPs while actively connected? Can you provide evidence of this?
Nov
13
comment Proper way to allow access to systems within different offices?
Ok - then your scenario is far simpler than you laid out. Unfortunately, it's simple VLAN pain that you either need to re-architect to permit the reality that remote users need access, or to pivot users once they have VLAN access.
Nov
13
comment What role does clock synchronization play in SSL communcation
@cpast Yes, POODLE works on live streams only and not recorded packets. I'm fighting a cold, so I might just delete this whole answer. It's clear to me, but I seem to be unable to articulate.
Nov
13
comment Viruses From Email Attachments
So, you want to safely transfer malware from your work machine to your home?
Nov
13
comment Viruses From Email Attachments
So, your question boils down to: how to safely download malware for analysis?
Nov
13
comment Proper way to allow access to systems within different offices?
After your edit, things still aren't clear. If they have VPN access, why is the firewall still an issue? Authenticate the user, not the IP.
Nov
13
comment What role does clock synchronization play in SSL communcation
@cpast I might need to edit to show that modification is an option. As for SSL being secure, have you heard about POODLE?