10,013 reputation
11547
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 4 months
seen yesterday

Canadian insurance company Security Manager.


Dec
17
comment Use Metasploit to exploit SMB through Conficker
Your real question seems to be: "why is my meterpreter session closing after a few seconds?" Look at other migration options. And, try harder ;)
Dec
17
comment NGO Joomla! site: Infected with malware? JavaScript injection?
please mark this as the answer
Dec
17
comment What kind of attacks can be performed off a local network?
Still very broad after the edit. The problem is that there are too many vectors to consider. Attacking the web browser is common, attacking the user is easiest. Turn the question around: what do you want to protect against? As it stands, you need a pentesting course to answer your question.
Dec
9
comment Advice of responsible disclosure
You do not have the option for 'responsible disclosure' any more. You have tainted yourself, the evidence, and your honour. As others have mentioned, you need to talk to an attorney.
Dec
3
comment What is the difference between antivirus and firewalls
It would take a specialized firewall to recognize binary signatures. It is misleading to say that a firewall is a specialized antivirus.
Nov
20
comment Storing credit cards to use for purchases on customer's behalf
Keep it in the existing file? I'm not sure what you're asking for. What are you hoping to protect against? I would note that PCI-DSS has some very specific things to say about the storage of credit card details, and those details lay out some security methods to employ.
Nov
20
comment Port list according to vulnerability
How would you correlate port 80 with port 443, 8080, 8081, etc? Are they different vulnerabilities or the same one? Do you need service or application-level vulnerabilities? Does XSS count as a port 80 vulnerability? You need narrow this down a lot more before we can attempt to answer this.
Nov
19
comment Prevention against Cryptolocker virus by requesting password for all installing apps in Windows 7
Good point Iszi. UAC will only prompt if properly configured.
Nov
19
comment Network and Security Associates v.s. CISCO Security Associates
The one good thing about vendor-specific training is that the course material tends to be well-written and tested, where a general education programme is dependant on the college's department. It is worth checking out just how good the existing material is.
Nov
19
comment Network and Security Associates v.s. CISCO Security Associates
Or, another way to put it, one is general, the other is vendor-specific. Vendor-specific security can be wonderful in that it gets into fine details, but it's the fine details in one specific device/software. Unless you are using that vendor's products, it might not be transferrable. General security gives a broader view and might cover areas that the vendor doesn't address.
Nov
18
comment Throttling DropBox behind a firewall
So, your question boils down to "what are Dropbox ips and ports?"
Nov
18
comment Strange Virus Infecting My Server
Yeah, sorry @John. Perform the suggested fix, then consider switching to not letting that server on the Internet until it is properly secured.
Nov
16
comment Determining false positives when scanning for live hosts with Nmap
@SonnyOrdell It might not be the answer you want, but this is answer that is available. Run ARP on the non-local network using a pivot point, check for ports, and run a packet capture. As soon as you run -PN, you have to take what comes.
Nov
14
comment Block all Nmap scan methods on Windows
Prevent scanning? You can't. Limit what is found? That's a different story. What are you trying to protect against?
Nov
14
comment Why are we still using HTTP?
I debate the 'no performance cost' assertion. Having recently deployed a complex site that uses AJAX, I can tell you for a fact that SSL was a big hit when we turned it on, even with beefy servers and infrastructure. Performance can't be ruled out.
Nov
6
comment Black-box fuzzing a TCP Port running an unknown applicaiton
I always run Wireshark while running an nmap scan on unusual ports. It's amazing what you can pick up.
Nov
6
comment Does the average user really need a password manager?
+1 To be fair to the OP, one does have to classify the data you are protecting and to employ the appropriate protections to the classifications. From that standpoint, you can reuse forum passwords IF that's appropriate. On the other hand, the anti-phishing benefits should not be overlooked.
Nov
6
comment Difference between IDS and IPS and Firewall
Neither IDS, IPS, nor Firewall guarantee legitimate traffic. They inspect traffic and act according to rules.
Nov
5
comment someone claims to have created such a malware, can he be true?
An infected video driver?
Oct
29
comment Efficacy of Chrome incognito mode
What are trying to protect against? @CodesInChaos is correct: private browsing is meant to protect against family members' snooping.