1,946 reputation
31126
bio website
location
age
visits member for 1 year, 10 months
seen 7 hours ago

2d
reviewed No Action Needed Are Telegram secret chats secure assuming MTProto isn't?
Aug
15
reviewed Reviewed SSL/TLS based communication over internet between two servers hosting IIS
Aug
15
reviewed No Action Needed Flash cookie and man-in-the-middle
Jul
16
reviewed No Action Needed What is the relationship between Suite B and FIPS 140-2?
Jul
12
reviewed No Action Needed OIOSAML: assertion consumer does not work
Jul
4
reviewed Reviewed Using encryption and hashing
Jul
4
comment Using encryption and hashing
The operative motto is: "Don't roll yer own".
Jul
2
comment Industry average for security as a percentage of product budget?
You have to conduct a detailed, bottom-up threat & risk (CYA) analysis of all relevant alternatives. A horde of Eastern Asian hackers eagerly awaits the results. Top-down stuff doesn't translate well between projects.
Jul
2
awarded  Curious
Jun
28
accepted Do we have to take algorithm substitution attacks seriously?
Jun
26
reviewed No Action Needed Credential In Windows
Jun
25
asked Do we have to take algorithm substitution attacks seriously?
Jun
17
comment Should we rethink our entire password strategy?
Should be converted into a Sec.SE blog post; too broad and has no definitive answer.
Jun
17
comment Why RSA signatures based on the hash of the message?
Please tell us what you have researched so far. Looks like an exam question.
Jun
6
reviewed No Action Needed Website login protection with chrome extension
Jun
5
revised GnuTLS ServerHello exploit (CVE-2014-3466) - how to verify?
Made title more descriptive. This should be the canonical Q...
Jun
5
suggested suggested edit on GnuTLS ServerHello exploit (CVE-2014-3466) - how to verify?
May
31
comment Is this slowloris attack or not?
Please don't cross-post here and on SF!
May
29
comment Are there any reasonable TrueCrypt forks?
possible duplicate of Are there other ways to encrypt files other then TrueCrypt and BitLocker
May
28
reviewed Reviewed How to protect against “padding oracle attacks.”