Sachin Shah

In the presentation, we see that there are two actions when not passing traffic… We can reject or deny. What is the difference between these? When might you use one or the other?

reject and deny in both cases result in a closed or gap in connectivity. Reject may mean that the data is corrupt or that a server is open but can not connect to a p…[Read more]

3. I think if a message comes in a format – the firewall can be adjusted to only look for that segment header. For instance I work with Hl7 messages which is healthcare standard and patient infirmation always starts with a “MSH” segment which is the header. These are allowed to pass otherwise they are firewall restricts the data. I know in our…[Read more]

Non-IT employees should have no access to these tools. I am a developer and not in security but I actually worked with vendors to address connectivity issues. I was able to download wireshark and packet sniffer tools. I work with vendors who have vpn accounts and we send data via HTTPs, TCP-IP and FTP. having these tools at my disposal lets us…[Read more]

Bring your own device is challenging in a work place. One of the hard things is if you have wi-fi and how secure is it. Is there a standard account for employees and a guest accountpassword. I know companies block apps to be used on their wi-fi. I know my company bans the use of many dating or personnel sites on their wi-fi. There are device…[Read more]

despite the low chances of a pandemic spreading to the staff, any company, not just IT staff needs to be somewhat pro-active. Most companies require a flu-shot now, in my job upon hiring they verified if I had gotten shots for chicken-pox and small-pox. Many companies when they hire people from oversees make sure they have certain shots like…[Read more]

great post Fred and explanation. Quantum computing is an off-shoot of Quantum Mechanics.. Standardization, Organization, and implementation may be decades away. Basically it is enhancing cyrptography in short -term but will be overtaking it long term.

In my line of work in healthcare, it is too dangerous to go open-source. There are HIPPA violations and patient care issues. I am at a big hospital and we have a mix of Open source and proprietary. Our emergency medical record is propritary and created by a large scale vendor. It is rough as we need them to have fixes, updates, changes in code and…[Read more]

I think it should be black-list model and its up to IT staff to implement. In my work their is a combination of white-list and black-list based on user credentials. For instance non-IT staff usually can not install anything outside the scope of their job. We also lock down computers from installation of applications unless they are administrators…[Read more]

I am like neil in that I grew up using Windows. But after learning Linux I understand its traits. linux is more secure and performance is better. Yet for large scale system Linux is a better operating system. I also feel lots of IT employees like myself should be better trained in this system. It is also better for people like us getting into…[Read more]

I work in a hospital and single sign was requested by clinicians as a way to alleviate users from remembering usernamepasswords for all systems and AD account. It is costly to implement. I think it is easier to start single sign on from ground up or have single sign-on for applications and a separate account for ADVPN, etc. The other drawback is…[Read more]

great post. I have friends who use this app or something of this sort sue to encrytion. More people do not use the standard SMS messaging on their phone due to no encryption. We see lots of encrypted things get uncrypted before and we shouldnt be surprised by it happening here.