1,130 reputation
622
bio website serverfault.com
location Manchester, NH
age 39
visits member for 2 years, 3 months
seen 2 days ago

Moderator at Server Fault.

Contract system administrator since time out of mind. I can also read your code!

Do you miss seeing users' accept rates? Try my Accept Rate user script for Chrome!

If your DevOps is all Dev and no Ops, and you need help, contact me.


Sep
23
awarded  Popular Question
Aug
31
revised SQL injection filter evasion
Fixed formatting and typos
Aug
31
comment Problem with OpenSSL rejecting CA possibly due to 12 digit Serial No
Some phones will only accept certificates signed by the device manufacturer.
Aug
31
comment How real is the threat of MITM when you have your own network
In the UK and many other countries, yes, you should be afraid of your ISP.
Aug
31
suggested suggested edit on SQL injection filter evasion
Aug
23
comment Can my IT department read my Google Hangouts chats while at work?
The only confusing part of this to me is why someone might think they have a "right" to misuse company resources.
Aug
7
comment Best practices for Tor use, in light of released NSA slides
@Neutralizer Well, before I went into IT, I was a funk guitarist. No, wait, punk guitarist. Then I did some pitching for the Braves...
Aug
7
revised Best practices for Tor use, in light of released NSA slides
Some more cleanup
Jul
17
awarded  Yearling
Jul
11
comment Should I get an antivirus for my Mac?
Gave you an upvote, despite one quibble: Android's problem is not its lack of a security model, (though there's some room for improvement there) but its glacial pace of updates to counter threats, something that's expected to continue into the foreseeable future. The addition of SELinux into KitKat will certainly help in the future, though.
May
30
comment Are there any reasonable TrueCrypt forks?
@drjimbob That license is a legal minefield. Among other things, it explicitly states that even if you follow it to the letter, they can still sue you for copyright infringement. I wouldn't go anywhere near this code.
May
29
awarded  Guru
May
29
comment Best practices for Tor use, in light of released NSA slides
@ChrisLively How to deal with pervasive video surveillance would make a whole question and answer in itself. And this one is running out of space...
May
29
revised Best practices for Tor use, in light of released NSA slides
Oops, forgot the link for TrueCrypt security issue
May
28
revised Best practices for Tor use, in light of released NSA slides
TrueCrypt is not known to be safe; remove reference to it
May
18
comment How should I configure my Tor-dedicated firewall for optimum security?
You need much more than that for a secure, functional configuration. See, for instance: How can I block all traffic except Tor?
May
14
comment Which is considered the first Cyber Security incident?
@kiBytes In that case, you'll need to provide a clear definition for "cyber security".
May
10
comment Practical way to communicate a pre-shared key?
Put someone on a plane.
Apr
14
comment Advantages of one time pad
Back in World War II, the Soviets accidentally duplicated a large quantity of key material for one time pads, making it pretty easy for US and British intelligence to break these messages.
Mar
4
comment Is storing plaintext passwords for email accounts any less bad?
Related from Server Fault: What would you do if you realized your email hosting provider could see your passwords?