1,520 reputation
623
bio website serverfault.com
location Manchester, NH
age 40
visits member for 2 years, 11 months
seen 15 hours ago

Moderator at Server Fault.

Contract system administrator since time out of mind. I can also read your code!

If your DevOps is all Dev and no Ops, and you need help, contact me.


Jun
21
comment Is receiving IPv4 connections on AF_INET6 sockets insecure?
Pretty much. Having the host reject mapped addresses on the wire solves all of these problems, including the last one (which is the main one that *BSD could argue about) so it's mystifying that they chose another approach.
Jun
20
answered Is receiving IPv4 connections on AF_INET6 sockets insecure?
Jun
14
comment Considerations for long-term key storage (paper backup, media for vault storage)?
@DarthGizka QR codes have pretty robust error correction. You can take a good sized chunk out of one and still read the code and get all the data it contained.
May
20
comment What are the OpenSSL standard Diffie Hellmann parameters (primes)?
weakdh.org/imperfect-forward-secrecy.pdf
May
12
comment Assigning random IPv6 ranges to ISPs as a security measure
@joeqwerty Full scans were being done in 12-24 hours several years ago. You're way behind the times. Keep in mind that those numbers are per port.
May
12
comment Assigning random IPv6 ranges to ISPs as a security measure
@joeqwerty No, it's true. Though that isn't the problem here.
Apr
27
comment Boot Attacks possible on encryption keys used in virtual machines
Physical security is your best defense against cold boot attacks.
Apr
27
answered Boot Attacks possible on encryption keys used in virtual machines
Apr
5
comment How would you detect an Evil Twin attack, especially in a new environment?
@slebetman Sure, and if you do this, the evil router can capture your password. Not a good idea.
Mar
21
awarded  Nice Question
Mar
21
comment Using Facebook via Tor
You may wish to use Facebook via their Tor hidden service instead.
Mar
21
comment Do you really have to go to the extremes this guide says?
That article is just a repost of my answer to Best practices for Tor use, in light of released NSA slides. As such, it is already out of date (as I update that post from time to time).
Mar
21
comment Security of host computer and network with Tor
Keep in mind that the Tor wiki page you linked is extremely out of date, so you should not blindly copy and paste anything on it.
Mar
21
comment Using anonymous email as official email
Closely related and probably duplicate: Best practices for Tor use, in light of released NSA slides
Mar
21
comment Syverson's paper (Users Get Routed), What do they mean by “common locations”?
In one degenerate case there are half a dozen exit nodes in the same datacenter. This research suggests that such colocation is a really bad idea.
Mar
19
comment Should a server be considered compromised simply because a port was open?
I get brute force attacks on my web servers constantly. Should I tell people to change their passwords every day, then?
Mar
19
comment How to prevent location information from any dialing call
How is your location data being transferred to the caller?
Mar
19
answered Should I update my openSSL package?
Mar
19
comment Should a server be considered compromised simply because a port was open?
@KnightHawk They have not mandated changing API keys, only recommended it.
Mar
19
asked Should a server be considered compromised simply because a port was open?