956 reputation
1513
bio website
location France
age
visits member for 3 years, 6 months
seen 2 days ago

Jul
2
revised Estimating the cost of implementing security measures
added 1 character in body
Jul
2
answered Methods to keep an autonomous log with high integrity
Jul
2
comment DMZ and Mail servers
@Contego: also feel free to accept the answer (by ticking the mark below the upvote counter, which then turns green)
Jul
2
comment DMZ and Mail servers
@Contego: the mail could be accessed by users from LAN to DMZ (same for incoming and outgoing mail) or, better, pulled from the DMZ to the LAN by an MTA, which would be the server users would be pointing to. As for the reverse proxy -I am assuming http(s) proxy?) - it will not help much as it will forward the traffic directly to the LAN, possibly to whitelisted URLs, but maintaining the attack payload which would be avoided by an the intermediate service I mentioned in my answer.
Jul
1
answered Estimating the cost of implementing security measures
Jul
1
answered DMZ and Mail servers
Jul
1
awarded  Enlightened
Jul
1
awarded  Nice Answer
Jul
1
comment Browser response to SHA1 signed cert
"Google is trying to shame people into moving from SHA1" ... still using SHA-1 on their own infrastructure (with a short life span, to avoid their own warning)
Jul
1
answered Can a wifi network have WPA encryption, WEP cipher and OPEN authentication?
Jul
1
answered Security Assessment v/s Security Engagement Breakdown
Jul
1
comment Asian websites don't use HTTPS
@Snewman8771: glad it helped, feel free to accept the answer if it is OK for you.
Jul
1
comment Asian websites don't use HTTPS
@Snewman8771: it is dangerous (to some extend only) to mix HTTP and HTTPS on the same page. You get a warning from your browser about that.
Jul
1
comment Asian websites don't use HTTPS
@NeilSmithline: correct, I updated my answer, thanks.
Jul
1
revised Asian websites don't use HTTPS
added 144 characters in body
Jul
1
answered Asian websites don't use HTTPS
Jul
1
answered Public/private key auth and VPN
Jun
30
comment Hiding (Obfuscating) Java script
+1, the exercise actually makes sense to show the opposite: that obfuscation is not a security measure (or anything useful, actually)
Jun
30
revised Secure text document's fingerprint
added 63 characters in body
Jun
30
comment Secure text document's fingerprint
@Mixo123: I guess that the "window" will be word-based (no "inter-word window", as it would be too much). In that case, if someone is interested in extracting confidential information, he would hash words of interest and look for their hashes in your DB. So the speed will not be a factor in your advantage. This said, it completely depends on the actual algorithm and its implementation.