1,455 reputation
623
bio website serverfault.com
location Manchester, NH
age 40
visits member for 2 years, 10 months
seen 5 hours ago

Moderator at Server Fault.

Contract system administrator since time out of mind. I can also read your code!

If your DevOps is all Dev and no Ops, and you need help, contact me.


May
20
comment What are the OpenSSL standard Diffie Hellmann parameters (primes)?
weakdh.org/imperfect-forward-secrecy.pdf
May
12
comment Assigning random IPv6 ranges to ISPs as a security measure
@joeqwerty Full scans were being done in 12-24 hours several years ago. You're way behind the times. Keep in mind that those numbers are per port.
May
12
comment Assigning random IPv6 ranges to ISPs as a security measure
@joeqwerty No, it's true. Though that isn't the problem here.
Apr
27
comment Boot Attacks possible on encryption keys used in virtual machines
Physical security is your best defense against cold boot attacks.
Apr
27
answered Boot Attacks possible on encryption keys used in virtual machines
Apr
5
comment How would you detect an Evil Twin attack, especially in a new environment?
@slebetman Sure, and if you do this, the evil router can capture your password. Not a good idea.
Mar
21
awarded  Nice Question
Mar
21
comment Using Facebook via Tor
You may wish to use Facebook via their Tor hidden service instead.
Mar
21
comment Do you really have to go to the extremes this guide says?
That article is just a repost of my answer to Best practices for Tor use, in light of released NSA slides. As such, it is already out of date (as I update that post from time to time).
Mar
21
comment Security of host computer and network with Tor
Keep in mind that the Tor wiki page you linked is extremely out of date, so you should not blindly copy and paste anything on it.
Mar
21
comment Using anonymous email as official email
Closely related and probably duplicate: Best practices for Tor use, in light of released NSA slides
Mar
21
comment Syverson's paper (Users Get Routed), What do they mean by “common locations”?
In one degenerate case there are half a dozen exit nodes in the same datacenter. This research suggests that such colocation is a really bad idea.
Mar
19
comment Should a server be considered compromised simply because a port was open?
I get brute force attacks on my web servers constantly. Should I tell people to change their passwords every day, then?
Mar
19
comment How to prevent location information from any dialing call
How is your location data being transferred to the caller?
Mar
19
answered Should I update my openSSL package?
Mar
19
comment Should a server be considered compromised simply because a port was open?
@KnightHawk They have not mandated changing API keys, only recommended it.
Mar
19
asked Should a server be considered compromised simply because a port was open?
Mar
1
comment VeraCrypt/TruCrypt - I can't understand why you'd want to create a “hidden” volume…?
It's to mitigate the rubber hose attack.
Feb
8
comment Why use one URL for all “pages” on my site?
None of the above, as security through absurdity doesn't work.
Dec
1
comment Is SSL dying? Should I buy SSL certificates for my sites any more?
Whoever wrote that article has never deployed IPSec, either in IPv6 or IPv4, and has no real understanding of how it works. If he did, the article would never have been written; it's about 99% wrong. We will continue to use TLS with IPv6 for the foreseeable future.