13,630 reputation
12060
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 10 months
seen 4 hours ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Oct
8
comment SQL injection — but why isn't escape quotes safe anymore?
you need to clean this answer - spelling, grammar, odd formatting - please put a little more time into your answers
Oct
8
comment How is a biometric authentication system secure?
rainbow tables? it's not about reversing, but about calculating the collision
Oct
8
comment How is a biometric authentication system secure?
You could change the salt used in the hashing algorithm and re-hash when you re-register the user?
Oct
8
comment How is a biometric authentication system secure?
but you could use the hash in order to create a duplicate print and use that (gelatin and a 3D printer)
Oct
8
comment Is it more secure to apply updates as soon as they get released?
When a patch causes downtime, it's the IT group's "fault". When a hacker exploits a unpatched security hole, it's the hacker's "fault". No one wants to blame themselves, so the blame is shifted to a nameless threat instead of Jim down the hall. I think that a lot of organizations think they are doing "risk management" when they are really performing "blame management".
Oct
8
comment Can 2 devices have same host-name on same network?
My question was HOW you are determining this.
Oct
8
comment Api authorization basic concepts in detail
Link-only answers aren't helpful because the links can go dead or the info can change. Please add the relevant info from the link so that this can become an answer.
Oct
8
comment Can 2 devices have same host-name on same network?
How are you determining that the other device is on your network? Is it simply a case of your device's MAC changing after reboot? code.google.com/p/android/issues/detail?id=23330
Oct
7
comment Pivoting through XSS
@shemly4000 your attack vector is the browser because that's how you are interacting. You could, as Abe said, try to coerce the target to download a payload from the server via XSS, but mostly this vector is about browser and web attacks. Credentials, session keys, DoS, injecting ads or other content, etc.
Oct
7
comment Pivoting through XSS
do you assume you have control over the web server? or just that you can execute a XSS attack?
Oct
6
comment Pivoting through XSS
You might need to define your expectations for 'exploitable' on the target-side.
Oct
3
comment Is it possible to prove a certain email has been sent using a certain computer?
I wonder how many mail providers do browser fingerprinting as a means of authentication? I suspect not any.
Oct
3
comment Is it possible to prove a certain email has been sent using a certain computer?
@AndrzejA.Filip Your comment highlights the limitation of David's answer. You can prove that it was sent from a certain account, but not that the authorized account owner sent it.
Oct
3
comment The most trusted hard problem
This new question should be in crypto.SE
Oct
3
comment How to bypass restrictive mac address filtering on home network (not malicious)
MACs can be changed in software. Your explanation is aimed at a basic audience, but you assume the reader knows what an IP Class is.
Oct
2
comment How to keep an internal node from spoofing an internal server's IP and thereby getting the server blocked by active defenses?
I don't think you are describing a DDoS threat, but a simple DoS scenario. I think you need to make your question more clear: "how can I keep an internal node from spoofing an internal server's IP and thereby getting the server blocked by active defenses?"
Oct
2
comment Collection of shell shock related logfile grep patterns
This might be better suited for ServerFault to make sure you get good coverage on the possibilities.
Oct
2
comment Ubuntu server seems compromised for a DDOS attack
You might have a bug in your PHP site that allows for file creation? If your zpanel is dead, then it is also not being updated/patched? I'd replace zpanel ASAP, but you seem to know that. I'm not sure what you're asking here.
Oct
1
comment Incident Response Toolkit
Completely agree. For some environments, you don't use any tools, because an event simply triggers a restore of the server/workstation image, therefore no need for forensic analysis. Other environments might need to know exactly what's gone wrong.
Oct
1
comment Incident Response Toolkit
Unfortunately, you've asked one of the no-no questions (product recommendations). Any list will become obsolete, and very opinion-based because every environment will need a different set of tools.