12,036 reputation
11651
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 7 months
seen yesterday

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Jul
9
comment PGP/GPG verifying authenticity
Yes, there are key management issues that need to be addressed, and I HOPE that the OP's employer is handling that properly. I considered key handling out of scope for the question.
Jul
9
comment How to monitor my home network traffic?
DNS solutions might resolve some of your issues at home. OpenDNS?
Jul
9
comment PGP/GPG verifying authenticity
gpg4win.org/doc/en/gpg4win-compendium_24.html
Jul
9
comment PGP/GPG verifying authenticity
Have you poked around in their documentation: gpg4win.org/doc/en/gpg4win-compendium.html
Jul
9
comment PGP/GPG verifying authenticity
We don't do product tutorials here, but we will be happy to provide the conceptual understanding. Where do you want to focus for now?
Jul
9
comment PGP/GPG verifying authenticity
You are asking for a tutorial on using that program, or are you asking for deeper understanding of Digital Signatures?
Jul
9
comment How to block web-sites from viewing browsing history within firefox?
Isn't that all part of Google Ad Words? When you perform a search on Google, it remembers that and when you go to other sites that use Google Ad Words, you get targeted advertising.
Jul
9
comment A few GPG questions
Then you could use the same 'simple' password for the password manager ....
Jul
8
comment A few GPG questions
As for password manager features and options, it will take 5 minutes to look at their homepages and choose one that works for you.
Jul
8
comment A few GPG questions
So, you want to encrypt the file, post it on Google Drive, and use a very simple password to decrypt it? I'm having trouble understanding what you are trying to secure against ....
Jul
8
comment A few GPG questions
A password manager also has the ability to use 2FA, which is a huge boost to the security of the data.
Jul
8
comment A few GPG questions
What happens if you lose your password to the GPG-encrypted file?
Jul
8
comment A few GPG questions
Why not a password manager? KeePass, LastPass, Password1, etc.?
Jul
8
comment A few GPG questions
Google Drive IS cloud storage ...
Jul
8
comment Generic error message for wrong password or username - is this really helpful?
If you have a particular target in mind before the attack, sure, but that's also not in the scope of the question. As an attacker I want to know what ANY account will have available. Not as having access to the system, but to mine whatever is possible from their account: PII, account info, re-used passwords, etc. None of my points are new or unusual. I'm getting the feeling that you just like to be dismissive.
Jul
8
comment Store a file on a harddisk without root having access to it
Encrypt it with a private key? PGP?
Jul
8
comment Firewall hole punching
People vote to reopen
Jul
8
comment Firewall hole punching
Please edit your question to explain 'hole punching' - I voted to reopen.
Jul
8
comment Export a folder from KeepassX
This is a highly localized question for a specific product. Keepass has a forum for this sort of thing.
Jul
8
comment Firewall hole punching
so, you want to study employing covert channels to create hidden streams of communication through a firewall?