1,361 reputation
311
bio website
location
age
visits member for 1 year, 8 months
seen Jul 26 at 19:28

Hi!

If you're in the Pittsburgh area and are interested in security I run a user group called Steel City Hackers. Feel free to check it out @ http://www.meetup.com/Steel-City-Hackers/

Jon


Jul
23
comment WiFi deauthentication issue
Have you looked into 802.11w? It should help if this is a management frame spoofing issue. en.wikipedia.org/wiki/IEEE_802.11w-2009
Jun
19
comment Are Extended Validation certificates any more secure than regular ones?
EV certificates also check revocation more thoroughly (news.netcraft.com/archives/2013/04/16/…), although that may not entirely be a strong security mechanism (imperialviolet.org/2014/04/19/revchecking.html).
Jun
5
comment Does CVE-2014-0195 affect HTTPS?
DTLS - so things like LDAP, SNMP, WebRTS, VOIP, DTLS VPN, etc.
Apr
28
asked Transparency Report Standards
Apr
28
comment Where are MAC used?
Also, it is used in good web apps to store your session cookie.
Apr
15
comment Check logs for Heartbleed exploit use?
Why is there an assumption that TLS encryption == TCP? DTLS is essentially why we have heartbeats to begin with.
Apr
15
comment Heartbleed detection
@Lekensteyn, that question specifically refers to server logs, whereas mine addresses network traffic. Even the accepted answer, which addresses network traffic, does not address post-encryption network traffic.
Apr
14
comment Heartbleed detection
Edited the wording to be more clear that I was saying that the RFC suggests encrypted heartbeat requests, not encrypted heartbleed exploits.
Apr
14
revised Heartbleed detection
added 39 characters in body
Apr
13
asked Heartbleed detection
Apr
11
comment How can an attacker use a leaked private key?
"Decrypt any past and future traffic" assumes the same private key, and no use of PFS.
Mar
10
answered Hash Security of Windows 7 Password
Mar
5
comment 802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)
My understanding is clients use WPA/WPA2 to perform authentication and association on 802.11 networks (802.11i). For more details see my.safaribooksonline.com/book/networking/wireless/0596001835/… and my.safaribooksonline.com/book/networking/wireless/1587051540/…
Feb
23
revised Don't understand how my mum's Gmail account was hacked
Changed HTTP to HXXP
Feb
23
suggested suggested edit on Don't understand how my mum's Gmail account was hacked
Jan
27
answered HTTP Reverse Proxy: Correct way to do SSL to backend
Jan
27
answered Can be WiFi credentials obtained by autoconnection feature + a mimicking hotspot?
Jan
24
comment Is there a way to split up my SSH Key using Shamir's Secret Sharing?
I'm not sure what you're benefiting from doing something like that. SSS would be better at doing something like sharing a secret with 10 of your friends, and requiring that 5 of them get together in order to be able to retrieve the secret key.
Dec
22
comment How can I use a proxy appliance as HTTP Proxy & Reverse Proxy at the same time?
Where have you seen it documented that bluecoat doesn't support this deployment type? I have worked with bluecoat in numerous similar scenarios and have put together what I feel is a relatively secure architecture.
Dec
22
answered How can I use a proxy appliance as HTTP Proxy & Reverse Proxy at the same time?