245 reputation
211
bio website masseria.org
location Florida
age 54
visits member for 2 years
seen Jul 17 at 17:41

Programming language experience includes: C, COBOL, Java, Fortran, JavaScript

profile for HeatfanJohn on Stack Exchange, a network of free, community-driven Q&A sites


Jul
17
awarded  Informed
Feb
22
comment Vulnerability of Chrome's “Login Data” file after being orphaned from the host system
Does anyone know how is the encryption performed when running Chrome under Ubuntu? Does Linux provide a similar data protection api?
Jul
19
awarded  Yearling
Mar
9
comment Will double encryption increase the security of cipher vs bruteforce?
Thank you for explaining how the "meet-in-the-middle" approach works! I quickly read the Wikipedia article, but didn't understand it until I read your excellent explanation.
Dec
22
comment How I add cookie to w3af for authenticated attacks?
Please provide a link to the online test you are referring to.
Oct
16
revised Please define “Carpet Bombing”
Added additional information
Oct
16
answered Please define “Carpet Bombing”
Oct
13
awarded  Commentator
Oct
13
comment How information in an access log could be used to identify the true identity of an impostor?
How do you believe that the unauthorized person accessed the system? Can you trace the userID that you suspected was used to an IP address that userID would not normally use?
Oct
11
comment If a bank says they do not have my login and password info, is that true?
@MKr Have you reported this to your country's equivalent of the US FBI? Another question you should post is can someone take control of your mobile telephone number to receive inbound voice calls and SMS text messages. In the old days of analogue cell phone, that answer was yes, but today with SIM cards I am not aware of how that can happen.
Oct
10
comment E-mail read receipt through XSS
They also get any and all cookies you have stored for the web site used in the URL and/or domain of the src URL.
Oct
10
comment If a bank says they do not have my login and password info, is that true?
Are you saying that whoever did this to you also took over control of your cell phone number in order to receive a phone call from your bank to your cell phone number to verbally confirm the change that was made to your bank account?
Oct
9
comment Is HTTPS secure enough for important information?
A normal proxy server will not be able to decrypt your traffic. They can only pass the data on unchanged. Again, the exception to this is a CDN reverse proxy which has been configured to have an SSL certificate for the web site you are visiting. This is done so that the CDN server that provide caching and other acceleration services.
Oct
9
revised Is HTTPS secure enough for important information?
Added additional information
Oct
9
revised How to protect encryption key while application is using it
Corrected spelling and grammar
Oct
9
revised Is HTTPS secure enough for important information?
Corrected spelling and grammar
Oct
9
answered Is HTTPS secure enough for important information?
Oct
9
suggested suggested edit on Is HTTPS secure enough for important information?
Oct
9
suggested suggested edit on How to protect encryption key while application is using it
Oct
8
answered How to secure data before returning Macbook Air?