18,441 reputation
23375
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 4 months
seen 57 mins ago

Security Architect


Apr
20
comment VPN protection against ddos
If an attacker knows your real IP, then they can flood your connection, regardless of your use of a VPN.
Apr
20
comment How to increase delay of ssh root access every time login fails
@Wulfire you are absolutely correct, but that can't be migrated because of the bounty. You will also see that the detailed answer references ServerFault.
Apr
20
comment How to increase delay of ssh root access every time login fails
@Wulfire The question is "how do I protect myself" which is a general question. The answer is general with specific tool mentions. The question is also 2.5 years old and the community has shifted a little since then. Your question is "how do I do this in Linux?"
Apr
20
comment How to increase delay of ssh root access every time login fails
Exactly. Your question has security implications, but the heart of it is a specific configuration/tool question, which is off topic here and better suited for SuperUser.
Apr
20
comment How to increase delay of ssh root access every time login fails
As this is a specific Linux configuration question, I'm voting to migrate to SuperUser.
Apr
20
comment If I were to perform a MD5 hash every microsecond from 1-1-1970 how many hash colisions would I have
does computing power factor in if the speed is assumed to be 1/ms?
Apr
20
comment Terms for input/output to and from a Firewall
To be honest, you have some strange criteria for the traffic, so I'm not sure if any answer would be accurate. All traffic, in and out, is (should be) inspected. From there, you have 'allowed' and 'blocked' traffic.
Apr
20
comment How do I check the hash of an ISO?
If an attacker has modified your hashing program to specifically change the hash of a certain file you just downloaded to be a specific other value, then you have other problems than a tainted ISO.
Apr
20
comment Can free email provider's partners and affiliates read your emails?
@norrrr You have to define what you want to protect yourself against. You keep changing who the threat is. Can someone ask an employee of Google to read your email for them? Sure - that can certainly be done. Can someone do that and not get caught? That's another story entirely. I think you need to more properly define what you concerns are.
Apr
19
comment Can free email provider's partners and affiliates read your emails?
Of course it is technically possible. Email is not a secure communication channel. That's why encryption of messages is such a big thing.
Apr
19
comment improving iOS 8 and os x security
This question is far too broad. If you could narrow your scope to one OS, and one specific security issue, we might be able to answer.
Apr
19
comment how to separate arguments in sql query
This question is a purely SQL programming question and not an InfoSec question at all.
Apr
19
comment What do you need to make your own R.A.T.?
It's broad because your question is completely undefined. There are many, many factors that you have not considered that makes your question too broad. What language do you want you use? Pick any one, each is possible to produce the software you want. On the other hand, even if this question was more defined, what you are asking is a purely programming question and not an InfoSec question.
Apr
19
comment Do search engines give searcher's IP address to sites that come up in search?
IP addresses also inform where the traffic is coming from (country, etc.) and that IS important to advertisers.
Apr
18
comment Password-less authentication in web apps - How safe it is?
I'm not hopping on this merry-go-round with you. You asked if it was realistic, the answer is a resounding 'no'. Is it possible? Of course, but it is not secure because it includes 0 security, as you yourself mentioned. If you are going to offload the security of your login mechanism to a 3rd party, then use secure 3rd party login mechanisms, which include OAuth.
Apr
18
comment Password-less authentication in web apps - How safe it is?
Because, as you suggested, you can fully rely on Google's security team to provide security for your login.
Apr
18
comment Password-less authentication in web apps - How safe it is?
Then use OAUTH instead of your emailing scheme.
Apr
18
comment Password-less authentication in web apps - How safe it is?
So 2FA without the first factor. This is the "what you have" factor. The problem is the consequence of having that device stolen.
Apr
18
comment Foolproof way to hide your IP when browsing
VPN 'leaks' can happen without compromise. It depends on how it is configured including DNS 'leaks'.
Apr
18
comment Non-trad bus model: I pay suppliers directly with client CC info. Need to be able to securely collect and read info
This actually isn't an InfoSec question. This seems more like a jotform ToS question. Just as you tagged your question, you need to use a payment gateway.