30,419 reputation
23277
bio website
location Troy, NY
age 30
visits member for 2 years, 2 months
seen 1 hour ago

Nov
18
reviewed Close How to remove Version Information from Encrypted OpenPGP message in Windows?
Nov
18
reviewed Close Should I Use Base64 or Unicode for Storing Hashes & Salts?
Nov
18
reviewed Close Old e-mail text types itself back into PC later by itself?
Nov
18
reviewed Close How to be secure on a unsecured wifi?
Nov
18
reviewed Leave Closed Scrambling Data and Keywords sent over the internet
Nov
18
reviewed Reject suggested edit on Best practice in web application security authentication to avoid bruteforce attack
Nov
17
comment Is Chip and PIN still Broken
Note that this doesn't actually break Chip, just allows an arbitrary PIN to be used if the merchant and issuer don't exchange information about the method of card holder verification. All it would take to fix this is to introduce the ability for the merchant to communicate this to the issuer for any issuers that include the verification method in their transaction data. You still need to have the actual card to make use of it though, so even without any change it is still more secure than mag stripe which can be cloned.
Nov
17
comment Question regarding SSL / TLS / Certificates in general
Adding some clarification for you. Yes, check the main How does SSL/TLS work, but the AES identifies the actual symmetric key used, but that is established by a key exchange which occurs using the certificate. The certificate is what you were making in openssl.
Nov
17
comment Is it possible that authorities can't block a certain website
It wouldn't even be possible to tell who watched it if the stream is encrypted. Multicast streaming doesn't work over the open internet and I don't think TOR has support for it either, so you would need to establish a unique connection for each viewer and the encryption would make it impossible to checksum to identify content. You could possibly length match, but some basic padding on the stream would destroy that.
Nov
14
reviewed Close Can I ever hope to be secure using a cell phone or any mobile device?
Nov
14
reviewed Close Finding Plaintext Password Repositories
Nov
14
reviewed Leave Open Hardware-based full disk encryption without pre-boot authentication
Nov
13
reviewed Close Proper way to allow access to systems within different offices?
Nov
13
reviewed Close RSS Feed Security warnings
Nov
12
reviewed Leave Open Possible to Mix SNI and Dedicated IP SSL on Apache?
Nov
12
reviewed Close Am I accountable for activity originating from my VPS?
Nov
12
reviewed Close Browser page “Not resolved” page hijacked by yandex
Nov
11
reviewed Leave Open How bad is it to truncate a hash?
Nov
11
reviewed Close Where do I start securing my system?
Nov
11
reviewed Leave Open How are 1x1 pixel images used in a malicious context?