790 reputation
725
bio website johngraybosch.com
location Hauppauge, NY
age
visits member for 3 years
seen Jun 17 at 17:02

I'm an Application Developer in Long Island, NY.


Sep
13
asked How to detect the NSA MITM attack on SSL?
Aug
7
comment Encrypting Fields in Database
@Saladin Actually in this scenario, the web application will only decrypt the key from the web.config on the pages or reports where the sensitive info needs to be retrieved. The idea is that ASP.NET has already authenticated the user through the auth cookie. This prevents an unauthenticated user from finding a SQL injection vulnerability on any arbitrary page and accessing the plain text info. This does not protect the info in the case of a stolen session.
Aug
2
comment Where can I get security breach alerts?
I like the national vulnerability database, which basically covers the same info as CVE, but you can get an RSS feed. nvd.nist.gov
Aug
2
answered Where can I get security breach alerts?
Jul
30
revised Protecting Password Hashes with Store Procedures?
added 211 characters in body
Jul
16
answered BitLocker with Windows DPAPI Encryption Key Management
Jul
9
comment Is it possible to prove which public key was used to encrypt a message?
I understand the difference. So to you my question might be, can you prove, mathematically that ciphertext C must have been encrypted by RSA public key K? Or if not prove, suggest with a high probability?
Jul
9
accepted Is it possible to prove which public key was used to encrypt a message?
Jul
9
revised Is it possible to prove which public key was used to encrypt a message?
added 48 characters in body
Jul
9
comment Is it possible to prove which public key was used to encrypt a message?
@Clockwork-Muse If Alice signed her message with her key before encrypting the message with Bob's key, then yes... But I'm not sure otherwise, hence the question. Please see my update.
Jul
9
asked Is it possible to prove which public key was used to encrypt a message?
Jun
19
accepted How does does the “Sign out all other sessions” feature work in Gmail?
Jun
19
comment How does does the “Sign out all other sessions” feature work in Gmail?
Hmm I guess the ASP.NET implementation is probably a question better asked on Stack Overflow.
Jun
19
comment How does does the “Sign out all other sessions” feature work in Gmail?
Why the downvote?
Jun
19
comment How does does the “Sign out all other sessions” feature work in Gmail?
Any idea how you'd accomplish this in ASP.NET?
Jun
19
asked How does does the “Sign out all other sessions” feature work in Gmail?
Jun
19
comment Allowing user to access password protected website without disclosing the password
@schroeder you're right. But trust is a human problem. You can't solve everything with technology. That's why they have non-disclosure agreements, and the like.
Jun
19
awarded  Teacher
Jun
19
comment Allowing user to access password protected website without disclosing the password
The employee and your friend should each have their own accounts, rather than using client's accounts...
Jun
19
answered Allowing user to access password protected website without disclosing the password