733 reputation
422
bio website johngraybosch.com
location
age
visits member for 2 years, 4 months
seen Oct 15 at 14:42

I'm an Application Developer in Long Island, NY.


Oct
31
asked Is there a hash algorithm that can identify similar files or strings?
Oct
29
accepted Brute Force In Order Or Random?
Oct
28
asked Brute Force In Order Or Random?
Oct
27
awarded  Popular Question
Sep
23
accepted How to detect the NSA MITM attack on SSL?
Sep
14
comment How to detect the NSA MITM attack on SSL?
How did the NSA know the private key of the CA in the brazil case?
Sep
14
comment How to detect the NSA MITM attack on SSL?
Fixed the backbone router assumption.
Sep
14
revised How to detect the NSA MITM attack on SSL?
deleted 5 characters in body
Sep
13
asked How to detect the NSA MITM attack on SSL?
Aug
7
comment Encrypting Fields in Database
@Saladin Actually in this scenario, the web application will only decrypt the key from the web.config on the pages or reports where the sensitive info needs to be retrieved. The idea is that ASP.NET has already authenticated the user through the auth cookie. This prevents an unauthenticated user from finding a SQL injection vulnerability on any arbitrary page and accessing the plain text info. This does not protect the info in the case of a stolen session.
Aug
2
comment Where can I get security breach alerts?
I like the national vulnerability database, which basically covers the same info as CVE, but you can get an RSS feed. nvd.nist.gov
Aug
2
answered Where can I get security breach alerts?
Jul
30
revised Protecting Password Hashes with Store Procedures?
added 211 characters in body
Jul
16
answered BitLocker with Windows DPAPI Encryption Key Management
Jul
9
comment Is it possible to prove which public key was used to encrypt a message?
I understand the difference. So to you my question might be, can you prove, mathematically that ciphertext C must have been encrypted by RSA public key K? Or if not prove, suggest with a high probability?
Jul
9
accepted Is it possible to prove which public key was used to encrypt a message?
Jul
9
revised Is it possible to prove which public key was used to encrypt a message?
added 48 characters in body
Jul
9
comment Is it possible to prove which public key was used to encrypt a message?
@Clockwork-Muse If Alice signed her message with her key before encrypting the message with Bob's key, then yes... But I'm not sure otherwise, hence the question. Please see my update.
Jul
9
asked Is it possible to prove which public key was used to encrypt a message?
Jun
19
accepted How does does the “Sign out all other sessions” feature work in Gmail?