300 reputation
320
bio website
location London, United Kingdom
age 29
visits member for 5 years, 5 months
seen Dec 22 at 15:13

Security consultant for a Big 4 professional services firm.


Oct
25
comment connecting to OS X remote management VNC from Linux or Windows
It's still good to know that progress has been made. Q&A sites are Internet's collective memory
Oct
22
comment Snort not sending alert log file to syslog server?
If you specify . /var/log/everything.log, will it record messages to the local syslog instance?
Sep
15
comment AnyConnect certificate/CA pinning on Cisco ASA 5510
using client-certificate authentication is a half-way house: clients could still establish an insecure tunnel, but this tunnel could not be relayed to the real vpn server. It also forces someone to do the whole cert management which can be painful.. :)
Sep
9
comment AnyConnect certificate/CA pinning on Cisco ASA 5510
AnyConnect to the best of my knoweldge relies on windows builtin trusted root cert store. Which means that in order to force it use only "my" CA, I'd have to kill the cert store. Seems such a basic feature - trust my own CA only, but alas I can't find that it exists.
Nov
26
comment Get a list of missing hotfixes for windows
@john-homer Not everything has a WSUS attached to it. Think of stand-alone installations.
Jul
4
comment Robust RJ45 for frequent connections/disconnections
Think hotdesk environment. cables go dead before you blink
Jul
4
comment Robust RJ45 for frequent connections/disconnections
Dunno, the clips break and that's that.
Nov
19
comment Effective Permissions displays incorrect information
Pricey! I wonder if Gold Finger just implements its own ACL logic based on groups and ACLs or ....
Sep
24
comment Cisco AnyConnect hangs on “Checking for profile updates…”
ASA 841-k8. AnyConnect 300857-k9. It works fantastic if no proxies are involved.
Sep
11
comment Disk / system configuration for log collection / syslog server
Update: the expected log volume is 1-4 gigs/day
Aug
30
comment Partitioning disk I/O on linux
Trying ionice, and point taken.
Jul
10
comment Effective Permissions displays incorrect information
Hi. Nice script. i have somehting properietary myself as well. Unfortunately, the MaxTokenSize is set to 65k and I suspect that it isn't related.
Jul
4
comment Effective Permissions displays incorrect information
Same result, unfortunately :(
Jul
4
comment Effective Permissions displays incorrect information
Thanks, I'll have a look!
May
9
comment Backup solution for road warriors
A splitting headache can make you loose entire day's earning but you wouldn't pay $100 for an aspirin pack.
Feb
23
comment Is it possible to switch to Kerberos only Windows domain
Reviewing the above articles, it is my understanding then that you can not force a server to not do NTLMv2 authentication. I understand that given the opportunity, Kerberos will be negotiated as the stronger protocol.
Feb
8
comment Is it possible to switch to Kerberos only Windows domain
@tony_roth Thanks for pointing that out. One of the reasons I'm looking into this is to prevent replay attacks or password hash cracking. If the NTLMv2 still gets sent along, then that's bad.
Feb
8
comment Is it possible to switch to Kerberos only Windows domain
Hi. Thanks for the link. Unfortunately it only discusses if LM/NTLM is in use, but not if Kerberos only domain is possible.
Dec
6
comment Log in as domain user with local administrator access
@maliq - Eh? What works?
Dec
5
comment Exchange security monitoring tools
Thank you for you answer. A rather disappointing state of afairs though.