12,026 reputation
11651
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 2 years, 7 months
seen 22 mins ago

Canadian insurance company Security Manager.

Owner of: SelfPhish.com


Jul
8
comment Export a folder from KeepassX
This is a highly localized question for a specific product. Keepass has a forum for this sort of thing.
Jul
8
comment Firewall hole punching
so, you want to study employing covert channels to create hidden streams of communication through a firewall?
Jul
8
comment Why do sandboxing environments not rely on antivirus programs?
Didn't you answer your own question? Anti-virus can be defeated by changing the behavior of the malware. Sandboxes exist to supplement anti-virus by analyzing the behavior, and not the code.
Jul
8
comment Why does the router fall when performing ARP Poisoning?
What do you mean by "the router falls"? What do you expect it to do?
Jul
8
comment Testing SQL injection using sqlmap
This doesn't add any more than what the accepted answer provides.
Jul
8
comment Generic error message for wrong password or username - is this really helpful?
Attackers tend to brute force accounts in order to get the data of THAT account, not to simply gain access to a system. You are raising points that are designed to be dismissed.
Jul
8
comment Generic error message for wrong password or username - is this really helpful?
This answer is nonsensical. How would creating a new user do anything? Why did you raise a 'straw man' with point #2?
Jul
8
comment Bypassing Trustwave NAC
I have a similar product and I haven't found a way around it. I have been curious to try to 'freeze' my ARP tables so that I am not affected by the ARP poisoning techniques it uses.
Jul
7
comment Substitute Key on 128 Bit Encryption
This program encrypts/decrypts anything you feed it, always using the same key?
Jul
7
comment Generic error message for wrong password or username - is this really helpful?
Making a decision on what works for your environment is fine, but you need to explain why you made that decision so that others understand its context. Your mitigating methods do nothing to address the concern of enumerating user accounts. Did you feel that enumeration was not a risk for your environment? Please provide more than hand-wavy dismissive statements.
Jul
7
comment Is Windows BitLocker secure?
... given certain conditions. Read the section on how it acquires the encryption keys.
Jul
7
comment What are some considerations before moving personal data to Google Drive?
Encryption IS a secure method. BUT the question is: secure against what threat? No measure is ever a silver bullet, and in that way, there is no 'secure' method to do anything. It is always a question of the nature of the threat you are needing to secure against.
Jul
7
comment How to block network scans with pfsense?
As long as the port scan follows very narrow characteristics. It's a reverse port-knock: if an IP hits certain ports in a certain way, then close all ports to the IP. The problem is that this measure is easily bypassed by slow scans, switching IPs, hitting common ports, etc.
Jul
7
comment Anti-phishing educational resources for users?
Assuming you have done a Google search, what materials do you like/no like?
Jul
7
comment untangle server at work place privacy
But Untangle doesn't have this option as part of it's UI, right? Any machine could also do the same thing, so that fact that it's on the Untangle box is secondary.
Jul
7
comment What does this Snort rule do?
Have you looked up the reference link in the rule?
Jul
7
comment Is telling user that he is already signed in while signing up vulnerable?
+1 you don't need to block access to the page, merely block access to the link to the page.
Jul
7
comment Where to save digital content and prevent sharing?
OR, you simply need an authentication mechanism to authorize users to have access to files on the website.
Jul
5
comment Nmap stealth scan shows that port is filtered
unless you are scanning from host to VM - the networking gets odd and nmap can behave strangely.
Jul
4
comment Nmap stealth scan shows that port is filtered
Wait - so you are running a Debian server with Apache on a VM and running nmap scans from the Virtual Host to the VM?