303 reputation
18
bio website blog.emsley.ca
location
age
visits member for 2 years, 10 months
seen yesterday

If it involves computers or electronics, I probably do it.

I have experience with Exchange, Sharepoint, Zabbix, Powershell, Hyper-V clusters, and a whole host of other things.

If you need to contact me, my email address is grant@emsley.ca


Dec
14
comment Does injecting querystring values directly into HTML pose a security risk?
+1 it's not your webserver that's at risk - it's your customers and your reputation.
Sep
24
awarded  Autobiographer
Jun
14
comment Web authentication - password vs key file
Sure, I'll just upload this 800mb video file every time I login...
Apr
24
comment How to get top management support for security projects?
@akam that's where network access protection comes in...no antivirus? no internet. no file shares. no network access period. That way you can have all the viruses you want, but you won't be spreading them over the network. If there is a legitimate reason to not have antivirus exceptions can be made, but those should be extremely rare.
Apr
24
awarded  Commentator
Apr
24
comment Does my brokerage/bank use poor password security measures?
Unfortunately banks are notoriously bad for having TERRIBLE password policies. Mostly because some of their processes relies on ancient software that can only handle 8 character passwords, can't handle special characters, and doesn't salt or even encrypt the passwords. You could try voting with your money and switching banks...but good luck finding one that doesn't have the same horrible issues.
Apr
24
comment How to get top management support for security projects?
Corporate policies don't force antivirus to get installed. Group policy software deployment and network access protection policies do. Deploying antivirus isn't something the users should have to do themselves.
Aug
7
answered wpa2-psk + wireless isolation = secure connection?
Jan
28
awarded  Yearling
Nov
16
awarded  Critic
Sep
4
awarded  Student
Aug
27
comment Truecrypt Plausible Deniability - Linux
They won't necessarily be turning it off: wiebetech.com/products/HotPlug.php so you may want to include a radio or GPS based trigger as well.
Aug
27
awarded  Scholar
Aug
27
accepted Attaching hotspot to existing network - can it be secured?
Aug
23
comment Web browsing on Windows 2008 R2 terminal server (RDS)
+1 for no flash for usability! I've used such thin clients before and would sometimes come across a website with full window animated flash stuff...making the system unusable for a few minutes while I struggled to close the window.
Aug
22
comment Attaching hotspot to existing network - can it be secured?
Indeed, that's what we did. But it requires reconfiguring their network, which can be a hassle.
Aug
22
comment Attaching hotspot to existing network - can it be secured?
Updated the question to include that. Attacks between wireless clients isn't a concern here. All I'm concerned with is protecting the office PCs from wireless clients. The best solution is to put the hotspot router directly off the modem, and connect the office PCs to my equipment so I can firewall them properly. Which is what I did in the end. I'm just wondering if there was a way to make this idea work, so no changes would need to be made to the existing network. I suspect the answer is no. But I also know there are people smarter than me out there!
Aug
22
awarded  Editor
Aug
22
revised Attaching hotspot to existing network - can it be secured?
added 233 characters in body
Aug
22
comment Attaching hotspot to existing network - can it be secured?
Because the goal was to be able to ship a preconfigured device to the location and have someone just plug it in. In the end, that's basically what we did, since I wouldn't help them set it up this way without finding a way to secure it.