1,400 reputation
623
bio website serverfault.com
location Manchester, NH
age 40
visits member for 2 years, 8 months
seen yesterday

Moderator at Server Fault.

Contract system administrator since time out of mind. I can also read your code!

If your DevOps is all Dev and no Ops, and you need help, contact me.


Mar
21
awarded  Nice Question
Mar
21
comment Using Facebook via Tor
You may wish to use Facebook via their Tor hidden service instead.
Mar
21
comment Do you really have to go to the extremes this guide says?
That article is just a repost of my answer to Best practices for Tor use, in light of released NSA slides. As such, it is already out of date (as I update that post from time to time).
Mar
21
comment Security of host computer and network with Tor
Keep in mind that the Tor wiki page you linked is extremely out of date, so you should not blindly copy and paste anything on it.
Mar
21
comment Using anonymous email as official email
Closely related and probably duplicate: Best practices for Tor use, in light of released NSA slides
Mar
21
comment Syverson's paper (Users Get Routed), What do they mean by “common locations”?
In one degenerate case there are half a dozen exit nodes in the same datacenter. This research suggests that such colocation is a really bad idea.
Mar
19
comment Should a server be considered compromised simply because a port was open?
I get brute force attacks on my web servers constantly. Should I tell people to change their passwords every day, then?
Mar
19
comment How to prevent location information from any dialing call
How is your location data being transferred to the caller?
Mar
19
answered Should I update my openSSL package?
Mar
19
comment Should a server be considered compromised simply because a port was open?
@KnightHawk They have not mandated changing API keys, only recommended it.
Mar
19
asked Should a server be considered compromised simply because a port was open?
Mar
1
comment VeraCrypt/TruCrypt - I can't understand why you'd want to create a “hidden” volume…?
It's to mitigate the rubber hose attack.
Feb
8
comment Why use one URL for all “pages” on my site?
None of the above, as security through absurdity doesn't work.
Dec
1
comment Is SSL dying? Should I buy SSL certificates for my sites any more?
Whoever wrote that article has never deployed IPSec, either in IPv6 or IPv4, and has no real understanding of how it works. If he did, the article would never have been written; it's about 99% wrong. We will continue to use TLS with IPv6 for the foreseeable future.
Nov
23
comment Would running VMs inside of VMs be a more secure way to study viruses, etc?
not in citation given - nothing I could find suggests that SELinux is ineffective when paravirtualized drivers are in use on KVM, and a quick Google search didn't turn up anything either. Do you have a source for this?
Nov
23
comment Would running VMs inside of VMs be a more secure way to study viruses, etc?
Nested virtualization is a thing now. Both Intel and AMD processors have supported it for a few years now, and hypervisors are (sometimes slowly) beginning to add support.
Nov
23
comment How do I report new malware?
I'm not happy with submitting only to VirusTotal. I just ran across a bit of malware that was first submitted to them over a year ago and today got only 3/53. This doesn't seem to be a very fast method of submission.
Nov
10
revised Best practices for Tor use, in light of released NSA slides
Numerous updates in light of 2014/11 raids
Nov
8
comment Should security-critical code be reused or rewritten?
@HadrienG. If you use, e.g. OpenSSL, and you also have in-house experts capable of maintaining it, consider allowing them to do so and contribute back to the project.
Nov
5
revised Is PPTP VPN ever secure? Under DD-WRT?
A bit of clarification