schroeder

7,526 reputation

11037

bio	website
	location	Canada
	age
visits	member for	1 year, 5 months
	seen	yesterday
stats	profile views	338

Canadian insurance company Security Manager.

	7,526 reputation	bio	website		visits	member for	1 year, 5 months
11037 badges		location	Canada		seen	yesterday

summary answers questions tags badges favorites bounties reputation activity

386 Comments

suggestions reviews revisions comments badges posts accepts all

Nov 19	comment	How do you explain the necessity of “nuke it from orbit” to management and users? @KDEx you need to consider your audience and tailor your answer to them. $X > $Y can be the best answer for certain audiences, but not all managers think so concretely, even having the numbers laid out. If they did, they would not be trying to override the expert in the situation with their own technical solution (run AV over it!). Granted, you need to know your numbers when the discussion gets to this point, but even you state there is room for interpretation (X%), which means there is always room to argue.
Nov 19	comment	OWASP Top 10 style security guide for implementation in hardware devices Buffer overflows protection, validating inputs, etc. All secure coding policies should apply to embedded systems.
Nov 19	comment	How do you explain the necessity of “nuke it from orbit” to management and users? It holds up fine. We can't replace all cells in a human body, but we wish we could. Cancer is never 'cured' it is 'survived' because we can never be sure all cancer cells are removed. With a computer, we have the ability to replace all the cells to ensure that all malignant elements are no longer a factor.
Nov 15	comment	consequences of grey hat hacking I don't know why there is a question here. The issue is with "and I hacked it". Finding a vulnerability is one thing. Crossing the line to exploit the vulnerability without consent shows lack of judgement, dangerous activity, lack of awareness of the law, and in my jurisdiction, breaking the law. Coupled with announcing it in a job interview where it could be interpreted as an extortion attempt means this person will never get a job with me, should be removed from the building, and the police called for the illegal acts. Period.
Nov 14	comment	Is it safe to use a weak password as long as I have two-factor authentication? @HerbCaudill Recently, Safari browser had holes that allowed malicious websites to inject code that pulled user data off of non-jailbroken phones.
Nov 14	comment	Is a simple, but very long password a good password? @AviD Can you elaborate on the wrongness? Is it the assertion that entropy is not the answer, or the use of pads on easy-to-remember password roots?
Nov 13	comment	consequences of grey hat hacking And neither colour hat is 'Ethical Hacking'. Ethical Hacking requires that the owners know about the hacking attempts before you start. That's the 'Ethical' part.
Nov 13	comment	consequences of grey hat hacking There is no contradiction in @Rook 's answer. You are running the software on THEIR server, which means you are hacking THEIR systems. The potential impacts on you do not give you license to circumvent their security, even if the goal is to tell them about it later.
Nov 13	comment	consequences of grey hat hacking This is NOT 'Ethical Hacking' - this is what is known as 'Grey Hat Hacking'.
Nov 8	comment	Will antivirus detect all keyloggers? @Polynomial you don't have an antecedent to 'this'. What are you advising against? Testing employees? Distributing keyloggers? Detecting keyloggers? Performing an heuristic analysis?
Nov 8	comment	Will antivirus detect all keyloggers? The better way to have performed the test is to create and email a fake, but safe, 'virus' that performs an innocent task. Design the email to test specific areas your employees were trained in. You could have tested keylogger detection of your antivirus in a test environment instead of distributing it in the wild.
Nov 7	comment	How do you connect honeyd to a web application? Google is your friend: travisaltman.com/… Why have you posted here and not done a basic search? There are tons of YouTube videos as well.
Nov 1	comment	Testing Web Application Firewall Configuration (ModSecurity) +1 WAF needs training and tuning over time and should be specifically configured for the app its protecting. External rulesets help you think about ways to write your own rules.
Oct 31	comment	How to bypass tcpwrapped with nmap scan I think what @KINGSABRI is saying is that there is no real data to grep for due to the FW. The OP is about finding a way to get relevant data.
Oct 12	comment	Nmap scan produces all “unknown” Please list all switches you used for the scan. -sL will always result in 'unknown' for example ...
Oct 9	comment	Silent (no user interaction) utility to clear cached credentials on Windows Question is too vague. The requested action requires some combination of the 3 requirements. The OP needs to clarify.
Oct 4	comment	Using tor with SET to bypass firewall policy? You are correct - you would be tunneling ssh through the TOR tunnel. Consider not using TOR, or use both.
Oct 4	comment	tcp dump vs fw monitor Sounds like a homework question. And the tcpdump command looks wrong ....
Oct 4	comment	Using tor with SET to bypass firewall policy? I think you need to look at 'ssh tunneling' and 'proxychains' backtrack-linux.org/forums/showthread.php?t=1496
Oct 3	comment	How do you search for a botnet out in the wild? Some honeypots will capture the botnet binaries, without allowing them to be installed. The info from the source code will direct you to the botnet C&C. I've done this very thing.