303 reputation
18
bio website blog.emsley.ca
location
age
visits member for 2 years, 10 months
seen yesterday

If it involves computers or electronics, I probably do it.

I have experience with Exchange, Sharepoint, Zabbix, Powershell, Hyper-V clusters, and a whole host of other things.

If you need to contact me, my email address is grant@emsley.ca


Jun
14
comment Web authentication - password vs key file
Sure, I'll just upload this 800mb video file every time I login...
Apr
24
comment How to get top management support for security projects?
@akam that's where network access protection comes in...no antivirus? no internet. no file shares. no network access period. That way you can have all the viruses you want, but you won't be spreading them over the network. If there is a legitimate reason to not have antivirus exceptions can be made, but those should be extremely rare.
Apr
24
comment Does my brokerage/bank use poor password security measures?
Unfortunately banks are notoriously bad for having TERRIBLE password policies. Mostly because some of their processes relies on ancient software that can only handle 8 character passwords, can't handle special characters, and doesn't salt or even encrypt the passwords. You could try voting with your money and switching banks...but good luck finding one that doesn't have the same horrible issues.
Apr
24
comment How to get top management support for security projects?
Corporate policies don't force antivirus to get installed. Group policy software deployment and network access protection policies do. Deploying antivirus isn't something the users should have to do themselves.
Aug
27
comment Truecrypt Plausible Deniability - Linux
They won't necessarily be turning it off: wiebetech.com/products/HotPlug.php so you may want to include a radio or GPS based trigger as well.
Aug
23
comment Web browsing on Windows 2008 R2 terminal server (RDS)
+1 for no flash for usability! I've used such thin clients before and would sometimes come across a website with full window animated flash stuff...making the system unusable for a few minutes while I struggled to close the window.
Aug
22
comment Attaching hotspot to existing network - can it be secured?
Indeed, that's what we did. But it requires reconfiguring their network, which can be a hassle.
Aug
22
comment Attaching hotspot to existing network - can it be secured?
Updated the question to include that. Attacks between wireless clients isn't a concern here. All I'm concerned with is protecting the office PCs from wireless clients. The best solution is to put the hotspot router directly off the modem, and connect the office PCs to my equipment so I can firewall them properly. Which is what I did in the end. I'm just wondering if there was a way to make this idea work, so no changes would need to be made to the existing network. I suspect the answer is no. But I also know there are people smarter than me out there!
Aug
22
comment Attaching hotspot to existing network - can it be secured?
Because the goal was to be able to ship a preconfigured device to the location and have someone just plug it in. In the end, that's basically what we did, since I wouldn't help them set it up this way without finding a way to secure it.
Aug
22
comment Is it safer to use less heard of software than popular software?
You believe Opera would be more secure because it sends ALL your traffic through a single server you have no control over? I'd consider it to be the exact opposite of safer.
Aug
16
comment How to convince your boss about importance of IT security
+1 for keeping good records documenting your involvement and warnings.