14,857 reputation
12865
bio website ca.linkedin.com/in/…
location Canada
age
visits member for 3 years
seen Dec 17 at 23:50

Security Architect

Owner of: SelfPhish.com


Nov
28
comment Secure voice app
Then where does the landline come in?
Nov
28
comment Secure voice app
@AndréDaniel I know that's what he meant. He's looking to make landline calls, though, which means he's looking for control over the telco that simply isn't possible. You'd have to have a custom modem on each end.
Nov
28
comment Are Linux vendor-supplied security updates enough for PCI Compliance?
I'm not sure that you can state that CentOS is the 'vendor' of PHP, but rather the supplier of install packages. From a practical point of view, if a distro fails to update its own repo and there are known security patches that need to be applied, you can't blame the distro repo for your lack of patching. That's why there are PCI patch scanners (that the OP used).
Nov
28
comment Are Linux vendor-supplied security updates enough for PCI Compliance?
I understand your point, but the OP stated they they knew that the versions installed were behind on versions. Once you know, you have the responsibility to patch yourself.
Nov
28
comment Encrypt Lightning event invite mails with pgp
This is a product-specific configuration question. You'd find better help on other sites.
Nov
28
comment Secure voice app
How does one "encrypt sound"? I'm not sure that you understand how telephones work. They haven't used "sound" in many decades.
Nov
28
comment SSL certificate expired
you assume it was an email ...
Nov
28
comment SSL certificate expired
@DTK that was my thought, but then they wouldn't be trying to "sell" him something.
Nov
28
comment Definitions of PKCS#11 abbreviations
Wouldn't this be in the spec or library?
Nov
28
comment SSL certificate expired
did they contact you to tell you that your SSL expired?
Nov
27
comment Risk when attacker has only physical access to a computer's USB port
I have a USB device from Yahoo's marketing team that opens a browser window, types in an URL, then executes. Imagine the damage that can be done with that if the URL was customized ...
Nov
27
comment Error 207: ERR_CERT_INVALID
This is really a server config question. Flag this question for migration and we'll get it to the right place.
Nov
27
comment typical request, what type of encryption is this?
You are confusing encoding, encrypting, and hashing. Where did you get those password strings?
Nov
26
comment Test if an email address is spammer's
There are services that allow you to have an email address that lasts for only a few minutes.
Nov
26
comment Test if an email address is spammer's
Let us continue this discussion in chat.
Nov
26
comment Test if an email address is spammer's
If you fake your address, you won't receive a reply (the spoofed address will). You might try short-lived email services for that.
Nov
26
comment Test if an email address is spammer's
"Blacklists" are what you're looking for, but all the blacklists I know deal with domains, and not specific addresses. Addresses can change on a dime, and not worth tracking.
Nov
26
comment Test if an email address is spammer's
If a spammer has taken over a valid gmail account, I'm not sure what you'd be able to do to test.
Nov
25
comment Company decrypting SSL, is it common?
Common? No. Unexpected? No. You can imagine that a military contractor would use these methods.
Nov
24
comment How do I view a list of known unpatched windows xp arbitrary code execution vulnerabilities?
@CostinGușă cvedetails is where you need to be. You can download the list then filter the way you want to.