14,857 reputation
12865
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years
seen yesterday

Security Architect

Owner of: SelfPhish.com


Dec
10
comment New honeypots application in network security
This is a "link-only" answer. Can you explain or summarize the contents of the article for your answer?
Dec
10
comment New honeypots application in network security
I'm not sure that you have done any research on your own question. A Google search results in many honeypot projects that are under active development.
Dec
10
comment Suggestion of encrypt method for short fixed size result
You are correct that hashing is not reversible, which is why you would need a lookup table to relate the hash to the data you need to relate it to. If you are limited to such a small set of characters, this is likely your best option.
Dec
10
comment Port Scan Detected and Blocked! - Bitdefender 2014
You need to answer user54791's questions before anyone can help you.
Dec
10
comment What are these unknown visits to my private, unlisted webpage?
And you're not the only one: wordpress.org/support/topic/…
Dec
10
comment What are these unknown visits to my private, unlisted webpage?
Once you attach to Google Analytics, it is no longer "private and unsearchable". And it appears that a link to your site made it to a forum ...
Dec
10
comment Suggestion of encrypt method for short fixed size result
Hash plus lookup table?
Dec
10
comment Is there a more up-to-date, free version of Visual Studio's Code Analysis?
You're looking for a static code analyzer that attaches to your Visual Studio and looks specifically for XSS? VS plug-ins tend to be paid, and static code analyzers, too. Is there a reason why you wouldn't want to test for XSS through QA instead of code analysis?
Dec
9
comment How can I obtain the internal IP of a computer behind NAT but reachable via certain TCP port?
@SopalajodeArrierez You will also have to read up on how NAT is implemented (esp. port forwarding).
Dec
9
comment Port Scan Detected and Blocked! - Bitdefender 2014
You mean to drop all incoming connections, not ports, right?
Dec
9
comment Port Scan Detected and Blocked! - Bitdefender 2014
We do not give recommendations for products. Nmap will not prevent scanning, it is itself a scanner. Just because the IP is from your country doesn't mean it is not a robot or virus.
Dec
9
comment Recommendations for installing OSSIM
For the types of questions you are asking, it would be best if you installed it and tested.
Dec
9
comment Creating a secure and encrypted e-mail service
"secure" against what? I'm seeing mostly encrypted channel and encrypted messages, but the encryption keys are on the server, so they are exposed.
Dec
8
comment Application-Server connection security
@AviD yes, yes, yes on so many levels. Yes, you should start out doing things 'securely' using best practices, but you also need to be mindful of what you are doing and what impact that is going to have. "What is this mitigating? Why do I want the mitigation? If successful, will it mitigate in a way that makes sense for this asset?"
Dec
8
comment List of security products for my network
Well, we are asking for your advice now, and you aren't helping. All I'm asking is for your answer to be 'unpacked' a little. As it stands, it's a product list without relevance.
Dec
8
comment List of security products for my network
I'm not sure that this answers the question. Or, if it does, the meaning is hidden. Can you flesh out how your list of tools applies to the OP's concerns?
Dec
8
comment Protecting a statistics endpoint
I understand the flaw, but even if a competitor decided to do this, and tries to skew data in a certain direction, aren't you going to verify problems that you see and then determine that the data is flawed? I simply don't see a viable threat here that would require authentication. Encryption? Sure. Authentication? No.
Dec
8
comment Is there scan-me-for-vulnerabilities services?
We know what nmap is. What kind of testing do you want to do that nmap can't?
Dec
5
comment Some very (very) strange issues in wpa handshake
using aircrack on the 'monitor'?
Dec
5
comment Is there scan-me-for-vulnerabilities services?
Is your host publicly available (a web server), or a machine in your home? what do you want to test for?