meta user
network profile
| bio | website | |
|---|---|---|
| location | Canada | |
| age | ||
| visits | member for | 1 year, 5 months |
| seen | May 16 at 23:06 | |
| stats | profile views | 341 |
Canadian insurance company Security Manager.
|
Dec 12 |
comment |
Is there something like the OWASP top 10 for BizTalk applications? All standard secure coding principles apply. There is not a handy Top 10 list for specific vendor frameworks. |
|
Dec 11 |
comment |
Some issues with iptables and nmap A little Socratic method never hurt anyone :) |
|
Dec 11 |
comment |
Some issues with iptables and nmap @yzT Why do you expect to see port 80? |
|
Dec 11 |
comment |
Some issues with iptables and nmap Please add your nmap command line! We cannot determine what is wrong unless you tell us what you actually did. |
|
Dec 10 |
comment |
Are there any free static analysis tools for C# / .NET code This question might end up as a 'list', which tends not to do well on IS.SE. I will point you to en.wikipedia.org/wiki/… |
|
Dec 10 |
comment |
How do the authorities know who's downloading protected software? What "personal information" do you believe a hacker provides? |
|
Dec 10 |
comment |
How to increase Windows PowerShell WebAccess security? You are asking too much at once, and you didn't even take time to make the list make any sense. Please rewrite this question. |
|
Dec 5 |
comment |
How can I detect if someone is sniffing network packets on the LAN? "any sniffer would have to start poisoning ARP" is not technically true. To sniff all traffic, then you need to ARP poison. But sniffing broadcasts and traffic on a shared switch line do not require ARP poisoning: I do it all the time. |
|
Dec 5 |
comment |
Having a problem with NBNS spoof module in Metasploit And include your settings. How can we help without basic commandline arguments? |
|
Dec 5 |
comment |
Examples of vulnerabilities being changed in only one (of many) places Rook means that this is so common, I'm not sure why you're having trouble coming up with examples. But, tools are not the solution: secure coding practices will tackle 80% of this problem. |
|
Nov 22 |
comment |
can a backdoor executable be used on an occupied port? If the firewall allows traffic on a port, then there is nothing stopping you, dormant or not. |
|
Nov 22 |
comment |
can a backdoor executable be used on an occupied port? do you mean to say that there are services running on those ports on the computer you are exploiting? |
|
Nov 22 |
comment |
TinyDNS and SPF: how to do the '99' records? Welcome to security.SE, but this question is highly specific to a software package. Take a look at the FAQ for tips on how to pose a question appropriate to this forum. security.stackexchange.com/faq |
|
Nov 20 |
comment |
Whats the best way to make my internet traffic anonymous? You have links for everything but the 'browser fingerprint' concept. Can you expand on that? Would a 'browser on a stick' defeat that problem? |
|
Nov 20 |
comment |
Which software is used to perform security tests on Android apps? @Rook the OP never said that he was an IT Sec student. What if he is a mobile app dev student who wants to lift the lid on app testing methods? Is that not what we are here for? |
|
Nov 20 |
comment |
Which software is used to perform security tests on Android apps? and this short overview: mcafee.com/us/resources/white-papers/foundstone/… |
|
Nov 20 |
comment |
Protect database resources from fake data inputs via web forms Nothing is being 'fooled' in your scenario if the data is valid. What you are describing is a form of DoS. You would have to limit the number of allowed connections/transactions a user can make in a timeframe. |
|
Nov 20 |
comment |
Which software is used to perform security tests on Android apps? Here's a collection of tools: symantec.com/connect/blogs/… |
|
Nov 20 |
comment |
Protect database resources from fake data inputs via web forms To withdraw money from the bank, the funds must exist, for the funds to exist, there must be a deposit, for the deposit to occur, there must be money from an external source, which came from another source, and so on. Each record correlates to another record at some point. If your data supports it, only allow user input where it can be related to other valid inputs. |
|
Nov 20 |
comment |
How to figure out which open ports or services are insecure? Nessus might tell you which versions of services have known vulnerabilities, but will not tell you which services are inherently insecure regardless of version. Open only the ports you need to function. |
