14,060 reputation
12162
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 11 months
seen 14 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Oct
20
comment XSS - Bypass this RegExp
have you tried regex parsers? myezapp.com/apps/dev/regexp/…
Oct
20
comment what are the best security certifications for beginners with no experience in IT
Your last sentence is the key - experience and first-hand knowledge are the most important. Certifications certify that you have those. You don't get certs to gain that experience.
Oct
20
comment what are the best security certifications for beginners with no experience in IT
If you search here, you will find a lot of people asking the same question. Your question is far too broad to answer because IT SEc is very broad.
Oct
20
comment Is there any practical attack on port knocking method?
Sniffing is the most reliable way to do this. Cracking the network monitoring system is a cool idea, too.
Oct
19
comment IIS 8.5 TLS 1.2 not working
this is a server config issue, not an Info Sec question
Oct
18
comment Can Suricata IPS detect and prevent ARP poisoning attacks?
This question is more suited to Suricata support.
Oct
18
comment Confusion over a firewall and proxy
To help you differentiate, you have to change your terms: a proxy controls the content outbound, not general traffic. Firewalls allow traffic, proxies allow content (which can sometime look like blocking traffic).
Oct
17
comment Setting up VPN connection for devices behind firewall
You are still giving us nothing to work with. We would need more details on the network topology to help. But even if you supplied that, your question is not on-topic for this site. This is a networking question.
Oct
16
comment Disabling SSL 3 on Chrome on Windows 64bit
This isn't a POODLE question, it's a client software settings questions and not a good fit for this site.
Oct
16
comment Is there a tool to verify if the Google SafeSearch is working on my Google account?
This is not an Info Security question. Do you want to know if it is 100% turned on or going to be 100% effective? To know that it is on, simply look at the settings (that's a software question). To know that it is 100% effective, you have to talk to Google Support (a vendor question).
Oct
15
comment Does Firefox support TLS on non-standard ports?
a packet capture would 'prove it'
Oct
15
comment How to handle legacy website account login credentials
as part of the process, also consider enabling MFA on sites that support it (and where it fits your needs)
Oct
15
comment How to handle legacy website account login credentials
Ah. Then could you update your question to reflect the 'process' instead of 'product' nature of your question?
Oct
15
comment How to handle legacy website account login credentials
Although I understand your concern, this question isn't specifically about Info Security. It is either a 'product recommendation' question, or a question about how to script the automation process.
Oct
15
comment Based on these email headers, where is this virus coming from?
@Jeremy but emails can contain attachments which contain viruses...
Oct
15
comment Why is VeraCrypt more secure than TrueCrypt?
The problem is that this is not public scrutiny: this data is from the author. I believe my point is still valid. In order to answer your question "what evidence that VC is more secure than TC," we need code review and testing. It's great that the author provides this info, but it is not relevant to your stated question. If your underlying question is answered by this, great, but then I suggest modifying your original post.
Oct
14
comment What is the name for “imperfect” verification options?
"nondeterministic" is likely the place you need to go, but I have not heard of a conceptual term to cover what you're asking.
Oct
14
comment What is the name for “imperfect” verification options?
"biometric" or are you expanding the scope or conceptual layers?
Oct
14
comment Why is VeraCrypt more secure than TrueCrypt?
The problem with your question is that there isn't enough for us to work with. We need to perform a code review in order to answer your question. We need either specific questions (like my proposed question) or enough details to work with a general question. Why is it more secure? Because more iterations. Is more iterations more secure? Depends: ask the crypto experts, or let us delve into the guts if the rest of the app. Either way, your underlying question is difficult to answer.
Oct
14
comment How secure is HMAC
have you read the OWASP guides on this issue? owasp.org/index.php/REST_Security_Cheat_Sheet