1,048 reputation
621
bio website serverfault.com
location Manchester, NH
age 39
visits member for 2 years
seen yesterday

Moderator at Server Fault.

Contract system administrator since time out of mind. I can also read your code!

Do you miss seeing users' accept rates? Try my Accept Rate user script for Chrome!

If your DevOps is all Dev and no Ops, and you need help, contact me.


Jul
17
awarded  Yearling
Jul
11
comment Should I get an antivirus for my Mac?
Gave you an upvote, despite one quibble: Android's problem is not its lack of a security model, (though there's some room for improvement there) but its glacial pace of updates to counter threats, something that's expected to continue into the foreseeable future. The addition of SELinux into KitKat will certainly help in the future, though.
May
30
comment Are there any reasonable TrueCrypt forks?
@drjimbob That license is a legal minefield. Among other things, it explicitly states that even if you follow it to the letter, they can still sue you for copyright infringement. I wouldn't go anywhere near this code.
May
29
awarded  Guru
May
29
comment Best practices for Tor use, in light of released NSA slides
@ChrisLively How to deal with pervasive video surveillance would make a whole question and answer in itself. And this one is running out of space...
May
29
revised Best practices for Tor use, in light of released NSA slides
Oops, forgot the link for TrueCrypt security issue
May
28
revised Best practices for Tor use, in light of released NSA slides
TrueCrypt is not known to be safe; remove reference to it
May
18
comment How should I configure my Tor-dedicated firewall for optimum security?
You need much more than that for a secure, functional configuration. See, for instance: How can I block all traffic except Tor?
May
14
comment Which is considered the first Cyber Security incident?
@kiBytes In that case, you'll need to provide a clear definition for "cyber security".
May
10
comment Practical way to communicate a pre-shared key?
Put someone on a plane.
Apr
14
comment Advantages of one time pad
Back in World War II, the Soviets accidentally duplicated a large quantity of key material for one time pads, making it pretty easy for US and British intelligence to break these messages.
Mar
4
comment Is storing plaintext passwords for email accounts any less bad?
Related from Server Fault: What would you do if you realized your email hosting provider could see your passwords?
Feb
20
awarded  Quorum
Feb
1
revised Best practices for Tor use, in light of released NSA slides
Moving hidden services very often may not be well advised
Jan
25
comment Bank cards - chips vs mag stripe security
Smartcards also come with a liability shift, i.e. much of the liability for fraudulent purchases shifts from the bank to the consumer. It will be much more difficult for defrauded customers to recover lost money if it was stolen because their smartcard, or some part of the payment system, was compromised by a third party.
Jan
15
comment Help investigating potential website attack (URL rewriting and ROT-13 obfuscation)
@GrandAvenueSoftware Absolutely you should contact the other ISP. Skip the email and pick up the phone.
Jan
15
comment Can hackers detect my operating system?
I assume you are getting rid of XP soon, as well.
Jan
12
awarded  Announcer
Jan
11
awarded  Good Answer
Jan
10
answered Credit card information being sent over HTTP?