8 reputation
3
bio website conservativeArt.net
location
age
visits member for 2 years, 9 months
seen Sep 26 '12 at 3:27

I believe that Jesus Christ is the King of kings and Lord of lords. I further believe that no one comes to the father except through him.

"Jesus answered, 'I am the way and the truth and the life. No one comes to the Father except through me.'" - John 14:6 NIV

"If we confess our sins, he is faithful and just and will forgive us our sins and purify us from all unrighteousness." - 1 John 1:9 NIV


Sep
24
awarded  Autobiographer
Jul
9
comment Server 2008R2 in Extra Small Windows Azure Instance?
Thanks Mr. Makogon. That’s awesome information. I just want to run an obscure personal website in the cloud, so I think the bandwidth and attached disk limitations are not a limiting factor for me. Do you or anyone else here know if there is some sort of legal restriction that would keep me from running SQL Server Express inside the XS Azure VM? For a hobbyist like me, a single XS VM on Azure seems to be a wonderful and inexpensive playground :-).
Jul
9
accepted Server 2008R2 in Extra Small Windows Azure Instance?
Jul
4
asked Server 2008R2 in Extra Small Windows Azure Instance?
Jan
15
awarded  Commentator
Jan
15
comment Should SSL be Used on Isolated Networks?
@Shane Madden - It sounds like I should just use SSL and be done with it :-) Thanks!!!
Jan
15
comment Should SSL be Used on Isolated Networks?
@Everyone - BTW, this question was about a theoretical and idealized network. A network like the one described does not necessarily exist. I was hoping to grab some best practices from this discussion, but that seems to have not been successful.
Jan
15
awarded  Scholar
Jan
15
accepted Should SSL be Used on Isolated Networks?
Jan
15
comment Should SSL be Used on Isolated Networks?
@Shane Madden - In my mind, a low-priv user can't install/remove programs without using clever virus like code so key loggers shouldn't be a big issue. Also, low-privilege users shouldn't "in theory" have access to the nodes through which packets pass, so I don't see how they can sniff packets without an ARP Posioning attack. Also, I'm guessing there are ways to mitigate ARP Posioning. Perhaps low-privilege users can be somehow blocked from sending ARP packets??? But despite all of this, it seems that SSL should be used for everything. So why isn't the entire internet secured with SSL?
Jan
14
comment Should SSL be Used on Isolated Networks?
symcbean - you are right that security implementation should be proactive instead of reactive, and I do agree with everyone that self signed SSL certificates are easy to generate; however, the only "serious" internal threat this thread has seemed to list so far is ARP Poisoning. The other options just don't seem to be likely avenues of internal attack, but I am not a security expert. That is why I solicited the opinion of wonderfully awesome and highly intelligent SF community.
Jan
14
comment Should SSL be Used on Isolated Networks?
@symcbean - I'm not sure why you downvoted Shane Madden's response either. I think Mr. Madden has given me the most useful response thus far. I am only delaying marking his response as an answer because I want to see if any other useful suggestions or threat lists come in. I will admit that I was orignially vauge in defining "isolated", but I was trying to indicate that I was not interested in external threats with as few words as possible.
Jan
14
comment Should SSL be Used on Isolated Networks?
@sam - Thanks Sam. I tend to agree with you; however, my potential customers may not always let me choose what technologies are used on the network. This thread was my way of seeing if I need to highly suggest SSL to clients when they don't see the need.
Jan
13
comment Should SSL be Used on Isolated Networks?
"Also you say your sysadmins are 100% honest" - I don't recall stating that I had any relationship to the network in question.
Jan
13
comment Should SSL be Used on Isolated Networks?
Maybe I meant to ask "If an intranet behind an ideal firewall is managed by 100%..."
Jan
13
comment Should SSL be Used on Isolated Networks?
"Remember that a user with zero privileges beyond the physical ability to read traffic from the wire..." - I didn't consider the possiblity of someone physically disconecting an ethernet cable and physically routing it through another device or using some sort of inductive monitoring device.
Jan
13
comment Should SSL be Used on Isolated Networks?
Thank you for pointing out ARP Poisoning. Until now, I thought that a malicious user had to have access to a server or router in order to examine another user's packets.
Jan
13
asked Should SSL be Used on Isolated Networks?