277 reputation
28
bio website e-faux.com
location Austria
age
visits member for 1 year, 9 months
seen Jun 27 at 8:06

Jun
10
comment Certificate authority structure - best practices
What exactly is the SSL connection used for? Does the software product authenticate itself against a centralized server at the customer premise? Do you use it for maintenance (i.e. the maintenance server authenticates against the software)? Does the software authenticates itself against a client piece of software?
May
20
comment Practical ways to prevent Denial Of Service attacks
Also egress filtering is a measure to prevent IP spoofing from your network with IPs from other networks. Maybe you want to add this to your answer.
May
20
comment Practical ways to prevent Denial Of Service attacks
What do you mean by how do I start translating that into programming terms?
May
20
comment What is a AUTH-KEY in the security of the computers?
Can you share the source where you cited that text from? In my understanding this looks more like a CSRF protection, than a phishing protection.
May
17
comment SSH MITM attack underway
Are you still able to connect to the IP via SSH, now when the server is turned off? Did you check a possible NAT configuration problem on any firewalls between the client and the server?
May
17
comment SSH MITM attack underway
No, it doesn't affect the server's fingerprint, but maybe the DNS record does not point to YOUR server right now, but to another SSH enabled server. I'd recommend to check that the IP you are connecting to is really the IP address the server is reachable under.
May
17
comment SSH MITM attack underway
Do you connect to the IP address directly or do you use a (dynamic) DNS record to determine the server's IP?
Nov
14
awarded  Yearling
Nov
3
comment Which URL is revealed when using wildcard SSL?
Besides of SSL handshakes the eavesdropper could also see some DNS requests, which might reveal the actual called URL.
Mar
26
awarded  Enlightened
Mar
26
awarded  Nice Answer
Nov
29
comment Safe to make a VPN connection over coffee shop WIFI?
@AJHenderson, eg MPLS or L2TP, but to be honest both don't seem relevant for the concrete question.
Nov
28
comment Safe to make a VPN connection over coffee shop WIFI?
It should be mentioned, that VPN does not imply encryption by definition.
Nov
19
reviewed Reviewed How do you explain the necessity of “nuke it from orbit” to management and users?
Nov
19
reviewed Reviewed How is the available entropy in /dev/random calculated (or estimated)?
Nov
19
comment Starting a secure php session
Which concrete scenario do you have in mind? If your infrastructure is behind a load balancer, every server still sees the same client IP address.
Nov
19
reviewed Reviewed Identifying device based on the MAC address
Nov
19
comment Identifying device based on the MAC address
Vendor in this case should be NIC vendor, as Apple will buy their NICs.
Nov
19
answered Starting a secure php session
Nov
18
comment Preventing insecure webapp on subdomain compromise security of main webapp
Do you mean, that a cookie set on a sub-domain can also be read on the domain itself?