520 reputation
316
bio website
location
age
visits member for 2 years, 3 months
seen Jun 20 '13 at 23:50

Inside the Twisted Mind of the Security Professional Bruce Schneier:

Security requires a particular mindset. Security professionals -- at least the good ones -- see the world differently. They can't walk into a store without noticing how they might shoplift. They can't use a computer without wondering about the security vulnerabilities. They can't vote without trying to figure out how to vote twice. They just can't help it.


Oct
9
awarded  Popular Question
Sep
24
awarded  Autobiographer
Jul
2
awarded  Curious
Jun
28
awarded  Yearling
Jun
5
awarded  Popular Question
May
25
awarded  Popular Question
May
16
awarded  Notable Question
Sep
27
awarded  Popular Question
Jun
28
awarded  Yearling
Apr
24
awarded  Popular Question
Mar
22
comment Why is NIST removing & not updating TLS guidance? What is the replacement?
Under "Archived Special Publications" csrc.nist.gov/publications/PubsSPArch.html Sp800-52 is the only document that has no "Superceded By:". I doubt there is an automatic cut-off.
Mar
22
asked If an ATM is stolen, how easy can the personal information of the users be recovered?
Mar
22
asked Why is NIST removing & not updating TLS guidance? What is the replacement?
Feb
28
comment What key sizes are allowed within TLS if the DHE_RSA is the only key exchange allowed?
Commonly one can select the TLS version allowed but this seems to be insufficient if the server is using certificates that include weak keys (for example 512-bit RSA or short DH public key). The cipher suite seems to indicate the algorithm and size for the bulk-encryption algorithm but for the key-exchange only the algorithm is indicated - DHE_RSA or DH-RSA, etc
Feb
28
asked What key sizes are allowed within TLS if the DHE_RSA is the only key exchange allowed?
Jan
31
accepted Salted hashes vs HMAC?
Jan
30
comment Are banks required to be PCI compliant?
Are the controls you mention standardized or at the whim of individual bank?
Jan
30
asked Salted hashes vs HMAC?
Jan
30
comment What security standards and regulations are in place for bank ATM?
Are you saying that banks have to be PCI compliant?
Jan
30
asked Are banks required to be PCI compliant?