25,775 reputation
971109
bio website
location Finland
age
visits member for 1 year, 5 months
seen 1 hour ago

I do security work and I enjoy it. You can reach me on: adnan.stackexchange[*at*]live[*dot*]fi


Apr
16
comment Why would the BBC web site always ask for a personal certificate, and how do I avoid giving it away?
@Lekensteyn There are indeed privacy concerns. Sadly, there's nothing you can do. You either use separate browsers, tolerate the popups, disable client authentication altogether, or simply accept the current situation. Hopefully, this behaviour will be configurable at some point. At least, some addon/extension will help with that. I've edited my answer to include your response.
Apr
16
comment Why would the BBC web site always ask for a personal certificate, and how do I avoid giving it away?
@l0b0 There's nothing else you can do. Firefox will keep popping up asking you choose a certificate as long as the server is requesting one and you have one. Please note that the certificate only contains your public key. If you don't want this to happen, disable the BBC rule in HTTPS Everywhere.
Apr
16
comment Why would the BBC web site always ask for a personal certificate, and how do I avoid giving it away?
Let me guess, the problem disappears when you disable HTTPS Everywhere? (Or just when you disable the BBC option/rule in HTTPS Everywhere)
Apr
10
comment Why did Java (JRE) vulnerabilities peak in 2012-2013?
@ntoskrnl Read from here chat.stackexchange.com/transcript/message/14840511#14840511
Apr
9
comment How can get email about latest vulnerabilities
secunia.com is pretty neat. There are many other services that provide CVE and NVD notifications (Google for that).
Apr
9
comment Which Browsers support TACK?
You said it, this is still a draft. No official server support. No official browser support. Almost nobody is taking this seriously, and that's not just me, that's basically what they're saying about their own project. In my personal opinion, this is a dead/dying project.
Apr
4
comment How many possible combinations in 8 character password?
@Iszi Please note the policy says "at least one of the characters should be...".
Apr
4
comment How many possible combinations in 8 character password?
6.70 x 10^15 possible combinations
Mar
31
comment Hardware-restricted root login
@ScepticalJule An example done with TOTP and PAM. spod.cx/blog/…
Mar
28
comment Is all RSA encryption now considered insecure? (Notably SSH and SSL)
If this is about RSA (the cryptosystem) then this it's too broad and primarily opinion-based (because we can only speculate on what the NSA is really doing). If this is about RSA (the company) then you clearly have no idea what you're asking. The NSA-RSA thing is about their RSA's (the company) PRNGs, and really has nothing to do with SSL/SSH. In any case, we really don't know what the NSA really knows.
Mar
28
comment How to get orignal ip of user even if he is using proxy
Well, you should have asked a a better answer. You wanted to know ways to detect a user's IP. Now you want ways to hide your own IP. Bad question either way.
Mar
28
comment How to get orignal ip of user even if he is using proxy
possible duplicate of Advanced techniques for detecting a proxy/getting original IP and Tracing Proxy Easy or Hard for a Normal Website?
Mar
28
comment Are there any systems out there that use a one-time pad?
One-time passwords aren't the same as one-time pads.
Mar
28
comment How can I verify my machine is not vulnerable from a specific exploit?
@kiBytes That's not entirely accurate. Not every exploit attempt is guaranteed to lead to a successful exploitation of a vulnerability.
Mar
27
comment How does a system authenticate a user using a hash function, after it has been salted?
possible duplicate of How to store salt?
Mar
26
comment How does data.stackexchange.com allow queries securely?
@barrycarter I'd love to, but I wouldn't feel so good about the rep I'll earn from it.
Mar
26
comment How does data.stackexchange.com allow queries securely?
data.stackexchange.com software is open source. Have a look code.google.com/p/stack-exchange-data-explorer
Mar
26
comment Is it possible for someone to modify keepass code, recompile and make it available for free download?
Yes it's possible. It happened to FileZilla earlier this year.
Mar
26
comment Why does the linux XRDP module use a 512 bit RSA key?
@Xeron This is active (github.com/neutrinolabs/xrdp/issues). Ask there.
Mar
25
comment How one would typically detect systems vulnerable to “NULL Session”?
@Philipp I'm pretty sure he's talking about accessing IPC$