1,614 reputation
924
bio website serverfault.com
location Manchester, NH
age 40
visits member for 3 years
seen 17 hours ago

Moderator at Server Fault.

Contract system administrator since time out of mind. I can also read your code!

If your DevOps is all Dev and no Ops, and you need help, contact me.


2d
comment How can common users defend against the StageFright vulnerability?
If you have Cyanogenmod, you are either already patched or will be patched shortly.
Jul
27
awarded  Pundit
Jul
25
comment Why is my internal IP address (private) visible from the Internet?
@Schilcote In-browser VoIP or videoconferencing? But the way they've done this, with no way to disable it, is frightening.
Jul
25
revised Best practices for Tor use, in light of released NSA slides
Using the Tor Browser is important, kids!
Jul
24
awarded  Constituent
Jul
21
revised Best practices for Tor use, in light of released NSA slides
More minor updates; further reading section
Jul
17
awarded  Yearling
Jul
14
awarded  Caucus
Jul
5
comment Is there a way to make a WEP-secured AP uncrackable?
Or new for $20.
Jul
4
comment SFTP on Windows - is it likely to be disabled?
How on earth did this get an upvote, since it's 100% wrong! Please read RFC 4251 through 4256 inclusive.
Jun
30
comment Unsubscribe safely
@Danny. Please don't do that on a service used by others, like Gmail or Hotmail, at least not for lists you actually signed up for. By marking as junk, you are affecting other people who do want to receive messages from those lists.
Jun
21
comment Is receiving IPv4 connections on AF_INET6 sockets insecure?
Pretty much. Having the host reject mapped addresses on the wire solves all of these problems, including the last one (which is the main one that *BSD could argue about) so it's mystifying that they chose another approach.
Jun
20
answered Is receiving IPv4 connections on AF_INET6 sockets insecure?
Jun
14
comment Considerations for long-term key storage (paper backup, media for vault storage)?
@DarthGizka QR codes have pretty robust error correction. You can take a good sized chunk out of one and still read the code and get all the data it contained.
May
20
comment What are the OpenSSL standard Diffie Hellmann parameters (primes)?
weakdh.org/imperfect-forward-secrecy.pdf
May
12
comment Assigning random IPv6 ranges to ISPs as a security measure
@joeqwerty Full scans were being done in 12-24 hours several years ago. You're way behind the times. Keep in mind that those numbers are per port.
May
12
comment Assigning random IPv6 ranges to ISPs as a security measure
@joeqwerty No, it's true. Though that isn't the problem here.
Apr
27
comment Boot Attacks possible on encryption keys used in virtual machines
Physical security is your best defense against cold boot attacks.
Apr
27
answered Boot Attacks possible on encryption keys used in virtual machines
Apr
5
comment How would you detect an Evil Twin attack, especially in a new environment?
@slebetman Sure, and if you do this, the evil router can capture your password. Not a good idea.