233 reputation
19
bio website init.se
location Stockholm, Sweden
age 43
visits member for 2 years, 2 months
seen 5 hours ago

I'm a unix sysadmin, working as a consultant at Init AB (www.init.se).

Previous jobs include sysadmin in charge of security related systems at a large bank, and mail servers at a largish ISP, including handling abuse and spam issues.

Email address: jenny@init.se


2d
comment Can I “hide” the private key, while still allowing it to be used?
I also thought of another way of keeping the authorized_keys file safe, see the edit. (And yeah, this is one question that overlaps between Information Security and Server Fault - I don't think this is the wrong place but maybe there are two right ones.)
2d
revised Can I “hide” the private key, while still allowing it to be used?
added another way to limit editing of the authorized_keys file
2d
comment Can I “hide” the private key, while still allowing it to be used?
The list is in the man page for sshd, under the heading Authorized Keys Format
2d
awarded  Yearling
2d
answered Can I “hide” the private key, while still allowing it to be used?
Dec
8
comment Found a bank account number vulnerability. How serious is this?
You've tagged this question with "authentication". It's not clear to me how knowing the account number will assist anyone in authenticating themselves to the bank's web site.
Dec
1
revised Client Cert Auth
fixed some grammar/language issues
Dec
1
suggested approved edit on Client Cert Auth
Nov
28
comment Moving /boot to USB and Preventing booting from other USB devices (Allow boot from only one USB)
Second question: What is the purpose of disabling booting off of other USB devices? Since your disk is encrypted, those devices shouldn't be able to read it anyway, right? They could destroy the data, but not actually get at it - and if you have backups, the destruction isn't a big deal.
Nov
28
comment Moving /boot to USB and Preventing booting from other USB devices (Allow boot from only one USB)
Have you considered burning it to a CD instead and booting off of that?
Nov
26
answered What happens if a page with an invalid SSL cert responds with a 302 redirect to a page with a valid cert? Do you still get the warning?
Nov
21
awarded  Citizen Patrol
Oct
6
comment Where are the anonymous/private domain validation SSL certs?
I still don't think this question fits ServerFault. You might try it at Information Security instead; with the rewording I think it could fit there.
Sep
2
awarded  Editor
Sep
2
revised Is there a security issue in using the same certificate for all a company's services?
changed domain name to example.com as that is the recommended usage per RFC
Sep
2
suggested approved edit on Is there a security issue in using the same certificate for all a company's services?
Aug
31
awarded  Critic
Apr
29
awarded  Supporter
Dec
9
comment Is it bad practice to use your real name online?
Google closed my husband's Google+ account for not believing it was in his own name just a couple of weeks ago. They graciously offered to maybe reinstate it if he'd scan his own passport and send them the scan. So I'd say that they are still closing accounts for not sounding or looking right to their very blinkered eyes.
Sep
10
awarded  Autobiographer