193 reputation
9
bio website init.se
location Stockholm, Sweden
age 43
visits member for 2 years, 2 months
seen 8 mins ago

I'm a unix sysadmin, working as a consultant at Init AB (www.init.se).

Previous jobs include sysadmin in charge of security related systems at a large bank, and mail servers at a largish ISP, including handling abuse and spam issues.

Email address: jenny@init.se


Dec
8
comment Found a bank account number vulnerability. How serious is this?
You've tagged this question with "authentication". It's not clear to me how knowing the account number will assist anyone in authenticating themselves to the bank's web site.
Dec
1
revised Client Cert Auth
fixed some grammar/language issues
Dec
1
suggested approved edit on Client Cert Auth
Nov
28
comment Moving /boot to USB and Preventing booting from other USB devices (Allow boot from only one USB)
Second question: What is the purpose of disabling booting off of other USB devices? Since your disk is encrypted, those devices shouldn't be able to read it anyway, right? They could destroy the data, but not actually get at it - and if you have backups, the destruction isn't a big deal.
Nov
28
comment Moving /boot to USB and Preventing booting from other USB devices (Allow boot from only one USB)
Have you considered burning it to a CD instead and booting off of that?
Nov
26
answered What happens if a page with an invalid SSL cert responds with a 302 redirect to a page with a valid cert? Do you still get the warning?
Nov
21
awarded  Citizen Patrol
Oct
6
comment Where are the anonymous/private domain validation SSL certs?
I still don't think this question fits ServerFault. You might try it at Information Security instead; with the rewording I think it could fit there.
Sep
2
awarded  Editor
Sep
2
revised Is there a security issue in using the same certificate for all a company's services?
changed domain name to example.com as that is the recommended usage per RFC
Sep
2
suggested approved edit on Is there a security issue in using the same certificate for all a company's services?
Aug
31
awarded  Critic
Apr
29
awarded  Supporter
Dec
9
comment Is it bad practice to use your real name online?
Google closed my husband's Google+ account for not believing it was in his own name just a couple of weeks ago. They graciously offered to maybe reinstate it if he'd scan his own passport and send them the scan. So I'd say that they are still closing accounts for not sounding or looking right to their very blinkered eyes.
Sep
10
awarded  Autobiographer
May
8
awarded  Analytical
May
8
awarded  Informed
Apr
12
comment Finding spam sending scripts?
If the scripts are called from apache, then grepping those logs might be useful.
Dec
19
awarded  Revival
Dec
19
awarded  Teacher