450 reputation
37
bio website decbis.tumblr.com
location New York, United States
age 38
visits member for 4 years, 1 month
seen 2 days ago

Nov
11
awarded  Yearling
Jun
8
awarded  Constituent
Jun
8
awarded  Caucus
Nov
11
awarded  Yearling
Jun
4
awarded  Commentator
Jun
4
comment Firefox Desktop Shortcut Being Renamed
Are you sure the shortcut is for Firefox and not for some html file (which will be show Firefox' icon since it's the default handler of html files)?
May
6
awarded  Editor
May
6
revised extract from pcap all protocols found
added 320 characters in body
May
6
answered extract from pcap all protocols found
Feb
11
comment What should I ask a prospective security consultant?
Perhaps you should ask if he/she saw this question & answers :)
Jan
26
comment What is an intermediate certificate authority?
I did not argue the possibility, rather the complexity. Tnx for the update.
Jan
24
comment SSL Certificate revocation check
@user1157: Because both CRL & OCSP checks are something that it's up to the client to do, it's not part of the SSL protocol.
Jan
24
comment What is an intermediate certificate authority?
That quote is so out of context and incomplete it's not even funny... There are a lot more things (that are a lot more complex to set up and deploy) that need to happen before a government agency having an Trusted Intermediate CA can "intercept, decrypt, and monitor secured SSL connections of any and all kinds."
Jan
24
comment SSL Certificate revocation check
@user1157: at the handshake stage after the server certificate is retrieved. It's up to the client (i.e. browser) to verify the server's certificate in any way it likes (i.e. has a valid certificate chain, it uses a strong certificate signature algorithm, it's not expired, Common name matches URL, it's not in the list of revoked certificates received from the CA on the last CRL update, got a 'good' reply to the OCSP request and so on).
Jan
24
answered SSL Certificate revocation check
Jan
20
awarded  Nice Answer
Jan
6
awarded  Critic
Dec
21
comment How to exploit the “PHP_MAGIC_QUOTES ON” vulnerability in order to cause max damage?
Don't forget to your own query and comment out the rest (so append ;-- ).
Dec
12
answered When brute-forcing DES, does knowing something about the plaintext help?
Nov
12
comment What is the best option for setting up a several sites supporting SSL on the same IP?
@AviD: I definitely agree that's not a very good idea from a security standpoint (not to mention they're pretty expensive too - if I remember correctly), just wanted to list all possible choices. If you have a good link explaining the risks I'll add than to the answer.