meta user
network profile
| bio | website | mricon.com |
|---|---|---|
| location | Montreal, Canada | |
| age | 37 | |
| visits | member for | 5 months |
| seen | 9 hours ago | |
| stats | profile views | 10 |
Systems administrator at the Linux Foundation.
|
1d |
comment |
How to know if two IP addresses point to the same web server? Only if you are on the same network and not behind a router. |
|
May 2 |
comment |
What are the ways to implement two factor authentication? My only problem with RADIUS is that it's not a very secure protocol. It was designed in the 90's and relies on pre-shared keys and weak hashing to secure the communication between the client and the server. The main recommendation when it comes to securing RADIUS is to actually run it over an IPSec connection. If you aren't doing that, you're vulnerable to a number of security attacks, such as man-in-the-middle. |
|
May 2 |
comment |
What are the ways to implement two factor authentication? I'm quite fond of IPA myself, but publickey,gssapi-with-mic is not really 2-factor. Unless you are using hardware tokens to store your ssh private keys (like an OpenPGP-compatible smartcard), your ssh keys are still "something you know" and not "something you have". The main goal of "something you have" is to demonstrate the presence of a device that isn't same as the computer performing the authentication. |
|
Apr 26 |
answered | What is the actual value of disabling remote root login using ssh? |
|
Apr 25 |
answered | Working from many places <-> being able to restrict SSH access to server to IP range |
|
Apr 12 |
answered | Why can't the police/government shut down black market websites? |
|
Apr 12 |
answered | How can encrypted traffic bypass the Great Firewall of China when it is being blocked? |
|
Apr 10 |
answered | How can I allow local pop3 but enforce remote pop3s on my ubuntu/postfix/dovecot OS/MTA/MDA |
|
Apr 9 |
answered | Self signed certificates for https |
|
Mar 5 |
comment |
Restrict access to a specific directory on Linux @leoluk: congratulations, you're part of the elite few now. :) |
|
Feb 16 |
answered | Does chaos theory have any practical application in computer security? |
|
Feb 16 |
awarded | Citizen Patrol |
|
Feb 6 |
revised |
Are there any solutions available which conform to AAA protocol? Fixed spelling of "conform" |
|
Feb 6 |
suggested | suggested edit on Are there any solutions available which conform to AAA protocol? |
|
Feb 1 |
answered | Restrict access to a specific directory on Linux |
|
Jan 31 |
comment |
Can an attacker reuse stolen SSL private key to recreate that domain on his server That being said, some browsers treat inability to verify revocation status as a "soft fail" and will trust the certificate. So, if the attacker that has your site's private key is able to fully MITM your traffic (e.g. via a rogue AP), they can refuse access to the OCSP server and pass the revoked certificate as still valid. Chrome has repeatedly threatened to not even bother with OCSP, famously calling it "seat belts that snap when you crash" (arstechnica.com/business/2012/02/…). |
|
Jan 31 |
answered | HTTPS Certificate mismatch alert before redirection |
|
Jan 31 |
revised |
How to tell if you're being ARP poisoned? fix spelling |
|
Jan 31 |
suggested | suggested edit on How to tell if you're being ARP poisoned? |
|
Jan 29 |
answered | What are the differences between ssh generated keys(ssh-keygen) and OpenSSL keys (PEM)and what is more secure for ssh remote login? |
