meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 5 months |
| seen | May 9 at 13:50 | |
| stats | profile views | 3 |
|
Apr 11 |
asked | BEAST mitigation on a Cisco ACE 4710 load balancer |
|
Dec 21 |
comment |
If someone asks to borrow your phone to make a call, what could they do? Surely the worst thing is to set off that nuclear weapon where I live, not Manhattan! |
|
Dec 17 |
answered | How to protect server uploads |
|
Dec 17 |
comment |
What issues arise from sharing a SSL certificate's private key? @lynks - might not make sense, but still happens. And there is no reason you couldn't serve www.example.org, secure.example.org, example.org and images.example.org from the same server. Good that it is not limited in this instance, though. |
|
Dec 17 |
answered | BEAST: IIS6: Failing PCI scan - are these ciphers OK? |
|
Dec 14 |
comment |
BEAST: IIS6: Failing PCI scan - are these ciphers OK? I think so, which is why we elected not to fix it (we have a requirement in our app to support IE6/7 still). I think it is acceptable, provided the CBC-based cipher is prioritised such that it will not be chosen over an RC4 implementation -- blogs.msdn.com/b/kaushal/archive/2011/10/03/… has some more details |
|
Dec 14 |
comment |
What issues arise from sharing a SSL certificate's private key? Not necessarily from a security standpoint, but some cert providers charge per-server; if S is cheap, then they probably bought a 1-server cert... |
|
Dec 14 |
comment |
BEAST: IIS6: Failing PCI scan - are these ciphers OK? I think the problem is the DES-CBC3-SHA entry; we had a third-party pen test that said the same and wouldn't go away until we removed anything with CBC in its name. |
|
Dec 14 |
comment |
How should I audit and monitor shared TCP ports in Windows? Can you request that it is reported to your systems by in-app code? stackoverflow.com/questions/93162/… |
|
Dec 10 |
revised |
Ordering of shared Phase 1/ISAKMP VPN policies deleted 26 characters in body |
|
Dec 10 |
revised |
Ordering of shared Phase 1/ISAKMP VPN policies added possible solution |
|
Dec 6 |
awarded | Editor |
|
Dec 6 |
revised |
Ordering of shared Phase 1/ISAKMP VPN policies added 5 characters in body |
|
Dec 6 |
awarded | Student |
|
Dec 6 |
awarded | Teacher |
|
Dec 6 |
awarded | Supporter |
|
Dec 6 |
answered | SQL — using string concatenation, how can I exploit this procedure? |
|
Dec 6 |
asked | Ordering of shared Phase 1/ISAKMP VPN policies |
