21,945 reputation
44285
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years, 7 months
seen 9 hours ago

Security Architect


Jul
16
comment What kinds of attacks can VLAN's mitigate?
Is this a homework question? Where did the list of "basic attacks" come from?
Jul
16
comment Add custom information to OpenVas reports
I'm not sure that this is on-topic here. I think you're looking for an OpenVas forum for this level of support.
Jul
16
comment Why can't I have WPA handshake on aircrack?
Have you searched online for the message you're getting? I'm seeing a lot of great fixes for this problem.
Jul
16
comment Why can't I have WPA handshake on aircrack?
Please edit your question to include those details. When you edit you will see the button to include images
Jul
16
comment Detecting a MITM attack
Yep, that's ARP spoofing not IP spoofing. IP spoofing is different.
Jul
16
comment Why can't I have WPA handshake on aircrack?
A few things: 1) it would be helpful to actually have screenshots, 2) it would also be helpful if you listed the command sequence you used, and 3) we really aren't tech support - there's too many possible issues that could be involved
Jul
16
comment Backup procedure for PCI
@SilverlightFox I worked with a QSA that said that because the logs support the systems used to access cardholder data, they are also under scope.
Jul
16
comment Detecting a MITM attack
That's not IP Spoofing, that's just a duplicate IP on the network.
Jul
16
comment Detecting a MITM attack
I'm not sure this will protect you from IP spoof, but it does protect against MAC spoofing. This will also only work on the local network.
Jul
16
comment Detecting a MITM attack
Did you mean "spoof DNS" or "spoof IP"?
Jul
16
comment Detecting a MITM attack
@ParthianShot I'm not sure about the "transparent" part. Your ISP is loudly part of the route.
Jul
15
comment How to start writing crypto software
Needed knowledge for what? You appear to have answered your own question: crypto classes are in the math department, not computer science. People writing good crypto libraries have a strong math background.
Jul
15
comment Backup procedure for PCI
Yep, but it's worth a mention somewhere.
Jul
15
comment Backup procedure for PCI
What about 9.5.1 "Store media backups in a secure location, preferably an off-site facility, such as an alternate or backup site, or a commercial storage facility. Review the location’s security at least annually."
Jul
15
comment Is there such thing as an OS “internal firewall”
Perhaps the term "sandbox"?
Jul
15
comment Backup procedure for PCI
What about 9.5.1 "Store media backups in a secure location, preferably an off-site facility, such as an alternate or backup site, or a commercial storage facility. Review the location’s security at least annually."
Jul
15
comment My Mom's Flash Player
This can work, but note that some Flash sites do not work properly in PepperFlash. I've worked for a site for whom this was a problem.
Jul
15
comment My Mom's Flash Player
The first question is really up to each individual vendor's site: there isn't going to be a catch-all solution. Your first question is also not an InfoSec question. The second question will result in a HUGE list of published issues. Short answer for #2 is: visit a site and a hacker now owns your computer. Google "Flash CVEs" for the official list of details on Flash's vulnerabilities.
Jul
15
comment How to isolate persistent pop-up browser hijack
"nuke from orbit" as in "reformat the drive and reinstall everything". This question is more of a tech support question than it is an InfoSec question. You aren't asking about hacking/viruses, you are trying to recover from one. I don't believe there is a malware recovery site on Stackexchange, but there are multiple other forums dedicated to this topic, including on AV vendor's sites.
Jul
15
comment Windows: unknown program/service etc. sends HTTP request to download a file; how can I find the origin of that request?
This question as asked (how to discover what called svchost), appears more to be a Windows-internals-specific question, and might be better asked over at SuperUser (despite viruses being a factor). If the reeal question you're asking is how to deal with this infection, then @DeerHunter has your answer.