1,290 reputation
622
bio website serverfault.com
location Manchester, NH
age 39
visits member for 2 years, 5 months
seen Dec 17 at 2:24

Moderator at Server Fault.

Contract system administrator since time out of mind. I can also read your code!

If your DevOps is all Dev and no Ops, and you need help, contact me.


Dec
1
comment Is SSL dying? Should I buy SSL certificates for my sites any more?
Whoever wrote that article has never deployed IPSec, either in IPv6 or IPv4, and has no real understanding of how it works. If he did, the article would never have been written; it's about 99% wrong. We will continue to use TLS with IPv6 for the foreseeable future.
Nov
23
comment Would running VMs inside of VMs be a more secure way to study viruses, etc?
not in citation given - nothing I could find suggests that SELinux is ineffective when paravirtualized drivers are in use on KVM, and a quick Google search didn't turn up anything either. Do you have a source for this?
Nov
23
comment Would running VMs inside of VMs be a more secure way to study viruses, etc?
Nested virtualization is a thing now. Both Intel and AMD processors have supported it for a few years now, and hypervisors are (sometimes slowly) beginning to add support.
Nov
23
comment How do I report new malware?
I'm not happy with submitting only to VirusTotal. I just ran across a bit of malware that was first submitted to them over a year ago and today got only 3/53. This doesn't seem to be a very fast method of submission.
Nov
10
revised Best practices for Tor use, in light of released NSA slides
Numerous updates in light of 2014/11 raids
Nov
8
comment Should security-critical code be reused or rewritten?
@HadrienG. If you use, e.g. OpenSSL, and you also have in-house experts capable of maintaining it, consider allowing them to do so and contribute back to the project.
Nov
5
revised Is PPTP VPN ever secure? Under DD-WRT?
A bit of clarification
Nov
5
comment Do we really need a long and complicated password for websites?
@drpexe You cannot assume that Gmail (or any other provider) will not be hacked. In fact, Google has been hacked before.
Oct
29
comment Is my phone carrier monitoring my traffic?
It's entirely possible that this is coincidental, and that they sent everyone (or a large group of people) the same text message. You might ask any friends who have the same carrier if they received such a message.
Oct
24
revised Best practices for Tor use, in light of released NSA slides
Malicious exit nodes doing binary patching
Sep
23
awarded  Popular Question
Aug
31
revised SQL injection filter evasion
Fixed formatting and typos
Aug
31
comment Problem with OpenSSL rejecting CA possibly due to 12 digit Serial No
Some phones will only accept certificates signed by the device manufacturer.
Aug
31
comment How real is the threat of MITM when you have your own network
In the UK and many other countries, yes, you should be afraid of your ISP.
Aug
31
suggested approved edit on SQL injection filter evasion
Aug
23
comment Can my IT department read my Google Hangouts chats while at work?
The only confusing part of this to me is why someone might think they have a "right" to misuse company resources.
Aug
7
comment Best practices for Tor use, in light of released NSA slides
@Neutralizer Well, before I went into IT, I was a funk guitarist. No, wait, punk guitarist. Then I did some pitching for the Braves...
Aug
7
revised Best practices for Tor use, in light of released NSA slides
Some more cleanup
Jul
17
awarded  Yearling
Jul
11
comment Should I get an antivirus for my Mac?
Gave you an upvote, despite one quibble: Android's problem is not its lack of a security model, (though there's some room for improvement there) but its glacial pace of updates to counter threats, something that's expected to continue into the foreseeable future. The addition of SELinux into KitKat will certainly help in the future, though.