ÃŁŁǫǛȉЖΦΤїҪ

less info
263 reputation
29
bio website
location United States
age 28
visits member for 2 years
seen yesterday

Apr
11
comment Is saving passwords in Chrome as safe as using LastPass if you leave it signed in?
From a practical perspective, the most common way to exfiltrate data for a malicious client-side program running with user trust is to (1) capture keystrokes, and (2) send them to a remote server. Both LastPass and Chrome (and any other system involving passwords whatsoever) are wholly and completely vulnerable to this technique. You type your password and you're owned.
Jan
24
comment What are the major security concerns for smartphones?
Looks like you beat me by 1 minute talking about root stuff :) FGITW!
Jan
23
comment Apparently PayPal-affiliated site with very suspect security
Is it normal for two different EV certificates (for two different domains on .com) to have the same serial number but a different OU and O? How would this be possible? Maybe they have some kind of special agreement with Verisign only available to the largest of corporations (PayPal certainly qualifies as large)?
Jan
22
comment Apparently PayPal-affiliated site with very suspect security
I just made a new In-Private Tab in Firefox (thus, not using any of my main browser's cookies) and still was able to get in without entering a valid email. Not sure why you are seeing something different. Might be the restrictive proxy I'm using for web access, but in that case, the question becomes, why would a restrictive proxy allow you through, unless it's doing client-side validation :P
Jul
18
comment Citation Needed for FIPS Anecdote Regarding MD5 and RC4
The document you linked is very informative. I will be able to extract the info I need from it, thanks to your help, to make an educated argument to my superiors that we have a problem. Thank you!!
Jul
18
comment Citation Needed for FIPS Anecdote Regarding MD5 and RC4
What about RC4 as the stream cipher? And what about SSLv3? Sorry for the questions; your answer is already helpful as-is, but you seem to be on top of the issue...
Jul
18
comment How to securely set up wifi?
I also defend my product recommendation by the fact that, for all intents and purposes, Cisco hardware is the industry standard, an order of magnitude more forcefully than Microsoft Windows is the industry standard desktop operating system. So recommending Cisco is like recommending Ford when the Model T was the only car on the market.
Jul
18
comment How to securely set up wifi?
Google keywords: Cisco WPA2-EAP RADIUS IPSec. It's very difficult to set up a reliable and enterprise-grade wifi network without going with Cisco equipment, so although this is kind of a product recommendation, be aware that open source implementations of all the relevant protocols do exist, so if you had proper hardware, you could set something like this up on Ubuntu on a spare laptop using free software. It wouldn't be very reliable, from my experience, though -- and the config would be insanely tedious. If you don't want to go that route, "Aironet" is the Cisco product line for wifi.