Eugen Constantin Dinca

430 reputation

bio	website	decbis.tumblr.com
	location	New York, United States
	age	36
visits	member for	2 years, 6 months
	seen	yesterday
stats	profile views	38

	430 reputation	bio	website	decbis.tumblr.com	visits	member for	2 years, 6 months
37 badges		location	New York, United States		seen	yesterday

summary answers questions tags badges favorites bounties reputation activity

26 Actions

suggestions reviews revisions comments badges posts accepts all

Nov 11	awarded	Yearling
Jun 8	awarded	Constituent
Jun 8	awarded	Caucus
Nov 11	awarded	Yearling
Jun 4	awarded	Commentator
Jun 4	comment	Firefox Desktop Shortcut Being Renamed Are you sure the shortcut is for Firefox and not for some html file (which will be show Firefox' icon since it's the default handler of html files)?
May 6	awarded	Editor
May 6	revised	extract from pcap all protocols found added 320 characters in body
May 6	answered	extract from pcap all protocols found
Feb 11	comment	What should I ask a prospective security consultant? Perhaps you should ask if he/she saw this question & answers :)
Jan 26	comment	What is an intermediate certificate authority? I did not argue the possibility, rather the complexity. Tnx for the update.
Jan 24	comment	SSL Certificate revocation check @user1157: Because both CRL & OCSP checks are something that it's up to the client to do, it's not part of the SSL protocol.
Jan 24	comment	What is an intermediate certificate authority? That quote is so out of context and incomplete it's not even funny... There are a lot more things (that are a lot more complex to set up and deploy) that need to happen before a government agency having an Trusted Intermediate CA can "intercept, decrypt, and monitor secured SSL connections of any and all kinds."
Jan 24	comment	SSL Certificate revocation check @user1157: at the handshake stage after the server certificate is retrieved. It's up to the client (i.e. browser) to verify the server's certificate in any way it likes (i.e. has a valid certificate chain, it uses a strong certificate signature algorithm, it's not expired, Common name matches URL, it's not in the list of revoked certificates received from the CA on the last CRL update, got a 'good' reply to the OCSP request and so on).
Jan 24	answered	SSL Certificate revocation check
Jan 20	awarded	Nice Answer
Jan 6	awarded	Critic
Dec 21	comment	How would you exploit this vulnerability in order to cause max damage Don't forget to your own query and comment out the rest (so append `;--` ).
Dec 12	answered	When brute-forcing DES, does knowing something about the plaintext help?
Nov 12	comment	What is the best option for setting up a several sites supporting SSL on the same IP? @AviD: I definitely agree that's not a very good idea from a security standpoint (not to mention they're pretty expensive too - if I remember correctly), just wanted to list all possible choices. If you have a good link explaining the risks I'll add than to the answer.