Reputation
32,704
Next tag badge:
592/400 score
77/80 answers
Badges
2 35 84
Newest
 Constituent
Impact
~1.7m people reached

Dec
8
comment generate certificate at runtime and validate
This is broken. Do not do this.
Dec
8
reviewed Close “What's my IP” shows a different result when running over https than over http
Dec
8
reviewed Close Why is device ownership useful?
Dec
8
reviewed Close OSSEC not detecting deleted files?
Dec
6
awarded  Nice Answer
Dec
5
reviewed Close Am I allowed to DDoS my own server?
Dec
5
reviewed Close What kind of SSL certificate do I need?
Dec
5
reviewed Reject Since I can set the source IP address to anything using raw sockets, does this mean I am untraceable?
Dec
5
comment Since I can set the source IP address to anything using raw sockets, does this mean I am untraceable?
@Kevin - it isn't that large of a number of routers normally. It may travel through 10 to 15, but generally, at least 1/3 of those are on the ISP's network and another 1/3 or so on the recipient's ISP's network. The ones in between tend to be backbone networks, but they still care about entry and exit points on their network for traffic for billing and peering negotiations. They may or may not log every packet, but if they start noticing a weird pattern, they are likely to make note of it.
Dec
5
comment Does it matter which key is considered private and which public?
Can we add more clarification here about if this is talking specifically about RSA or about asymmetric crypto in general? It makes a huge and potentially catastrophic difference.
Dec
5
answered Since I can set the source IP address to anything using raw sockets, does this mean I am untraceable?
Dec
4
reviewed Leave Open Which forward secrecy cipher suites are supported for TLS1.0 protocols?
Dec
4
reviewed Close Automated tools to manage or monitor authorized_keys?
Dec
3
reviewed Close Is there a Plug and Play demonstration kit for various types of attacks?
Dec
2
reviewed Leave Open Encrypt files on FTP server
Dec
2
reviewed Leave Open Do I have to hash users' IP addresses when I log them?
Dec
2
comment Do I have to hash users' IP addresses when I log them?
I would also add that storing the IPs in a "non-reversible" manner is counter productive as it prevents you from being able to track security threats against your site. If you don't have an accessible IP address in the log file, then you can't report relevant information in the case of an attack on your systems.
Dec
1
answered MITM faking certificates
Nov
26
comment Are photographs of fingerprints a security risk?
@Josef - that's an interesting area of research, but it is still making some approximation guesses which could potentially throw off getting an accurate finger print reading. It would also have perspective issues to correct for and shaping issues in order to get a consistent finger print out of the video. It might be possible at some point in the future, but I'm still not particularly convinced that the state of the art could extract a usable print, at least for finger print systems with a low false positive rate. Other methods are certainly far easier to obtain prints.
Nov
25
answered Are photographs of fingerprints a security risk?