773 reputation
525
bio website johngraybosch.com
location
age
visits member for 2 years, 10 months
seen Mar 27 at 20:18

I'm an Application Developer in Long Island, NY.


Dec
4
asked How secure is the web-based file browser that comes with my NAS?
Nov
26
awarded  Popular Question
Oct
31
comment Is there a hash algorithm that can identify similar files or strings?
See also: stackoverflow.com/questions/12952729/…
Oct
31
comment Is there a hash algorithm that can identify similar files or strings?
Thanks Tom. Please see my update to my question and feel free to add your comments.
Oct
31
revised Is there a hash algorithm that can identify similar files or strings?
added 1145 characters in body
Oct
31
accepted Is there a hash algorithm that can identify similar files or strings?
Oct
31
revised Is there a hash algorithm that can identify similar files or strings?
added 252 characters in body
Oct
31
comment Is there a hash algorithm that can identify similar files or strings?
Yes that's what I was looking for. It's a curiosity. I was wondering if what you pointed me to exists. And I was wondering: do virus scanners use this? If not, why not?
Oct
31
asked Is there a hash algorithm that can identify similar files or strings?
Oct
29
accepted Brute Force In Order Or Random?
Oct
28
asked Brute Force In Order Or Random?
Oct
27
awarded  Popular Question
Sep
23
accepted How to detect the NSA MITM attack on SSL?
Sep
14
comment How to detect the NSA MITM attack on SSL?
How did the NSA know the private key of the CA in the brazil case?
Sep
14
comment How to detect the NSA MITM attack on SSL?
Fixed the backbone router assumption.
Sep
14
revised How to detect the NSA MITM attack on SSL?
deleted 5 characters in body
Sep
13
asked How to detect the NSA MITM attack on SSL?
Aug
7
comment Encrypting Fields in Database
@Saladin Actually in this scenario, the web application will only decrypt the key from the web.config on the pages or reports where the sensitive info needs to be retrieved. The idea is that ASP.NET has already authenticated the user through the auth cookie. This prevents an unauthenticated user from finding a SQL injection vulnerability on any arbitrary page and accessing the plain text info. This does not protect the info in the case of a stolen session.
Aug
2
comment Where can I get security breach alerts?
I like the national vulnerability database, which basically covers the same info as CVE, but you can get an RSS feed. nvd.nist.gov
Aug
2
answered Where can I get security breach alerts?