29,580 reputation
23075
bio website
location Troy, NY
age 30
visits member for 2 years, 2 months
seen 20 mins ago

Oct
20
reviewed No Action Needed Can the following function be somehow exploited/used for malicious behaviour?
Oct
20
reviewed Close Can Suricata IPS detect and prevent ARP poisoning attacks?
Oct
20
reviewed Close Identify an unknown type of hash
Oct
20
reviewed Close What would cause a server to only send over 1 SSL certificate to a client?
Oct
20
reviewed Close Establish IPSEC Tunnel between two Ubuntu 12.04 PCs over LAN
Oct
20
reviewed Reject suggested edit on removing SSLv3 does not seem to fix POODLE problem
Oct
20
answered Should I change phone number and e-mail address after PayPal fraud?
Oct
18
awarded  Nice Answer
Oct
17
reviewed Close How does ASIC cryptocoin miners affect the security of scrypt?
Oct
17
reviewed Close Is possible to be hacked remotely?
Oct
17
reviewed Close MD5 update functions
Oct
17
reviewed Close Certificate Chain validation in crypto++
Oct
17
reviewed Close subuser, benefit or liability?
Oct
17
comment Now that CloudFlare offers potentially-insecure free SSL to all users, would a new HTTP header be useful?
@Riking - I was more indicating that Cloudflair should be de-trusted for behaving in an insecure manner. Using SSL only to their servers is insecure and I'd argue an abuse of the system. We could consider an extension to SSL to say something is a proxy cert, but honestly, I don't see enough value in such a service. It doesn't protect from anything other than ISP spying or a spying device installed on the user's local routing path. It is something, but still leaves a lot open.
Oct
16
reviewed Close Disabling SSL 3 on Chrome on Windows 64bit
Oct
16
reviewed Close Do iOS applications have access to the certificates installed?
Oct
16
reviewed Close Is having a GUID in a https url secure enough?
Oct
16
reviewed Leave Open Mentioned On A Blog By A “Hacker” - Should I Care?
Oct
14
reviewed Leave Open How to best set up public WiFi without giving access to the rest of my network?
Oct
14
comment Are single case alphanumeric passwords the most user friendly?
@Peter - right, I'm agreeing that a longer password with less complexity is fine and may be more usable for some. Practically though, we don't want to require a 13 character password if the user prefers to use special characters and we can't only require 8 characters without checking the complexity or they might just enter an 8 character lower case password. I was proposing a way of checking the complexity while still allowing the user to use whatever type of password they prefer.