435 reputation
319
bio website
location London, United Kingdom
age 29
visits member for 5 years, 1 month
seen Aug 10 at 21:19

Security consultant for a Big 4 professional services firm.


Nov
26
comment Get a list of missing hotfixes for windows
@john-homer Not everything has a WSUS attached to it. Think of stand-alone installations.
Jul
4
comment Robust RJ45 for frequent connections/disconnections
Think hotdesk environment. cables go dead before you blink
Jul
4
comment Robust RJ45 for frequent connections/disconnections
Dunno, the clips break and that's that.
Nov
19
comment Effective Permissions displays incorrect information
Pricey! I wonder if Gold Finger just implements its own ACL logic based on groups and ACLs or ....
Sep
24
comment Cisco AnyConnect hangs on “Checking for profile updates…”
ASA 841-k8. AnyConnect 300857-k9. It works fantastic if no proxies are involved.
Sep
11
comment Disk / system configuration for log collection / syslog server
Update: the expected log volume is 1-4 gigs/day
Aug
30
comment Partitioning disk I/O on linux
Trying ionice, and point taken.
Jul
10
comment Effective Permissions displays incorrect information
Hi. Nice script. i have somehting properietary myself as well. Unfortunately, the MaxTokenSize is set to 65k and I suspect that it isn't related.
Jul
4
comment Effective Permissions displays incorrect information
Same result, unfortunately :(
Jul
4
comment Effective Permissions displays incorrect information
Thanks, I'll have a look!
May
9
comment Backup solution for road warriors
A splitting headache can make you loose entire day's earning but you wouldn't pay $100 for an aspirin pack.
Feb
23
comment Is it possible to switch to Kerberos only Windows domain
Reviewing the above articles, it is my understanding then that you can not force a server to not do NTLMv2 authentication. I understand that given the opportunity, Kerberos will be negotiated as the stronger protocol.
Feb
8
comment Is it possible to switch to Kerberos only Windows domain
@tony_roth Thanks for pointing that out. One of the reasons I'm looking into this is to prevent replay attacks or password hash cracking. If the NTLMv2 still gets sent along, then that's bad.
Feb
8
comment Is it possible to switch to Kerberos only Windows domain
Hi. Thanks for the link. Unfortunately it only discusses if LM/NTLM is in use, but not if Kerberos only domain is possible.
Dec
6
comment Log in as domain user with local administrator access
@maliq - Eh? What works?
Dec
5
comment Exchange security monitoring tools
Thank you for you answer. A rather disappointing state of afairs though.
Aug
16
comment Best MySQL failover and load-balancing for shared hosting environment
I agree, Master-Master is very painful. I suggest using some disk sync solution like drbd and HA to take over the IP.
Apr
30
comment Firewall rule visualisation tool
This certainly is in the direction that I want, but I've previously looked at it and found it too simple to graph more than say 100 or so rules - the visual clutter is visible even in the screenshot. But thank's for reminding nonetheless!
Apr
26
comment Firewall rule visualisation tool
A directed one :) What is permitted to connect to what, very visually.
Apr
24
comment Firewall rule visualisation tool
OS doesn't matter, firewall types almost don't matter, but cisco pix and checkpoint fw would be the first choices. I am looking to get a graph out of it. I've looked at fwbuilder and sceenshots don't impress me.