21,955 reputation
44285
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 8 months
seen 56 mins ago

Security Architect


Jul
22
comment How secure is socks5 proxy over ssh?
I'm not sure what your question is?
Jul
22
comment Obtaining large data sets for research: MySQL, PHP, Apache, etc
Frankly, I'd host a small web app on a free web service and post the IP/URL in various spots (Pastebin, forums, etc.) and gather the logs from that. I've done the same thing for my honeypot projects. You would have full control over the context, and you can generate valid traffic and behaviour in a controlled manor.
Jul
22
comment Obtaining large data sets for research: MySQL, PHP, Apache, etc
These log files can only be understood in context. I'm not sure a random dump of logs from an unknown implementation would be helpful. For instance, any connections to my webapp from Elbonia would be considered suspicious, but not so for an Elbonian webapp. You are also relying on the logging level and error handling to be consistent and correctly configured. Other than that, there are known anomalous patterns that would be common to most situations, and you don't need other's datasets for that.
Jul
22
comment Is it helpful to have a captcha on a login screen?
Locking out IPs can be very problematic for customers if they share an IP (corporate users, etc.)
Jul
22
comment Unsure if I have understood Hydra syntax correctly?
I'm confused. You have a syntax that works and an indication that hydra changed their syntax, but you still want to know why the old syntax doesn't work?
Jul
22
comment How can LPWA get implemented
A Google search is coming up with rich results.
Jul
22
comment What are the pros and cons of a VPN for privacy
You also copy/pasted all this from the link you provided (including errors).
Jul
22
comment What are the pros and cons of a VPN for privacy
I don't think this answers the question. You are discussing the benefits of a specific VPN software instead of the idea of a VPN itself.
Jul
19
comment Vulnerability test for CVE-2014-2483?
While looking for CVEs, you might want to prioritize those that have "exploit available".
Jul
19
comment Which attacks can a malicious hosting company execute?
You are still co-mingling "what attacks can be done" and "what can I do to protect myself".
Jul
19
comment At what point in their employment should security policies be explained to an employee?
"the concept of security" might be introduced during the interviews, but not the policies or their content. Typically, there is an assumption that one would comply with all legally enforceable corporate policies no matter what their content. If the ability to work securely is a requirement, specifically, of a position, then the interviews would not be introducing security, but would be querying the applicant's experience with security.
Jul
19
comment At what point in their employment should security policies be explained to an employee?
Before employment? In North America, that would be very strange, indeed.
Jul
19
comment How to track back a dynamic IP address?
Network-level data like that isn't public. You'd have to obtain the logs from the ISP's. I updated my answer below.
Jul
19
comment Password manager like LastPass with security guarantee or warranty?
It's not just that none are offered, but it is unlikely that any will be offered.
Jul
19
comment Password manager like LastPass with security guarantee or warranty?
Although this is about password manager services, this is not an InfoSec question. It looks more like a legal question than anything else. There are reasons why software is not provided with warranties or guarantees: primarily, it would have to depend on a specific version of the software. If the cloud service made an update, the warrantee could be invalidated.
Jul
18
comment Monitor websites being visited on network
you need to include these details in your answer
Jul
18
comment Is it neccessary to use X-FRAME-OPTIONS to prevent ClickJacking attacks?
Title and question do not seem to match.
Jul
18
comment Browser as Honey-Pot, is there?
A honeypot allows the attack to happen just to see how far the attack goes. Is that what you want? Or do you just want to defend against all possible attacks?
Jul
18
comment how to protect my USB stick from Viruses
I'm having trouble understanding this answer. Is it an answer? It doesn't seem to be focused on the Question.
Jul
18
comment how can this prove a clickjacking vulnerability?
First, do you understand how clickjacking works?