Reputation
574
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
6 20
Impact
~24k people reached

Feb
1
comment Can browsers connect HTTPS w/ the NONE cipher?
Cool! Can you provide more details? You mention that it is disabled by default in Opera -- how did you enable it? (Feel free to post screenshots.) Can you also provide more details about the anonymous ciphers, too, for no authentication?
Jan
31
asked Can browsers connect HTTPS w/ the NONE cipher?
Jan
5
awarded  Notable Question
Dec
12
answered What is the community doing for supporting downgrading TLS?
Dec
12
comment What is the community doing for supporting downgrading TLS?
@NeilSmithline, I've clarified the question, and removed the duplicate link
Dec
12
revised What is the community doing for supporting downgrading TLS?
clarify the last sentence and remove the erroneous link in Russian
Dec
12
comment What's the best practice for MitM'ing https traffic to distinguish self-signed certs?
The link you provide doesn't support your rhetoric -- people basically say that CAcert is not any more or less trustworthy than any of the other CAs.
Dec
12
comment What's the best practice for MitM'ing https traffic to distinguish self-signed certs?
To have the record straight, the only reason it was removed from OpenBSD was because CAcert's root certificate apparently didn't have a free licence!
Dec
12
comment What's the best practice for MitM'ing https traffic to distinguish self-signed certs?
A lot of sites do use https with certs by CAcert, which is not generally trusted, for example, undeadly.org, part of the OpenBSD community; outright blocking all such sites surely wouldn't be ideal.
Dec
12
asked What's the best practice for MitM'ing https traffic to distinguish self-signed certs?
Dec
12
comment What is the community doing for supporting downgrading TLS?
Which non-English pages? The links provided are all in English, and are summarised within the question.
Dec
12
asked What is the community doing for supporting downgrading TLS?
Nov
17
comment Is malware or screen capture possible with iMac as external display?
Your update is now pure speculation that DRM compatibility checks somehow have similar attack surface to DMA, which are two entirely separate things.
Nov
16
comment Is malware or screen capture possible with iMac as external display?
I think your answer makes an assumption that Mini DisplayPort and Thunderbolt are the same thing, which, if I recall my further investigation after asking the original question, may not be correct. E.g., just because the connector is the same, doesn't mean that PCI Express is available for these DMA attacks to surface. But how does one distinguish between the two? What about the combinations? Perhaps any adapters that could block the extra signalling?
Oct
20
awarded  Notable Question
Oct
7
awarded  Popular Question
Aug
4
awarded  Notable Question
Jul
25
awarded  Constituent
Jul
19
asked Is there an iframe attack surface to webcache.googleusercontent.com?
Jul
14
awarded  Caucus