3,089 reputation
612
bio website
location Ireland
age
visits member for 1 year, 6 months
seen 46 mins ago

Jul
22
answered Is there any way to block LD_PRELOAD and LD_LIBRARY_PATH on Linux?
Jul
11
comment Do SSL / X.509 certs cover all ports for a host?
Great, thanks. Some quick research indicates its use seems to be limited mostly to SIP/SDP/MSRP, EAP-TLS and XMPP protocols, i.e. where identity is more fine-grained than a hostname or IP address.
Jul
11
comment Do SSL / X.509 certs cover all ports for a host?
There's an implied link to the allowed protocol(s), by way of (extended) key usage, e.g. "TLS Server" or "email Protection", e.g. a cert only for S/MIME email use should not be supported for TLS at all. One of the permitted subjectAltName types is uniformResourceIdentifier, which could contain a port number. I strongly suspect support for that is close to non-existent ;-)
May
26
comment What part of the CSR is hashed in order to create its signature?
See RFC2986 (§4.1). Signature is done over the DER binary data (not PEM), and the field sizes vary by content due to 0-padding of some integer values. The digest is not used as-is though. If your real intention is to skip key generation, you can just omit -new and -newkey and use -key to create any number of CSRs from an existing key.
May
21
comment LAMP Stack Tiers - why?
This question covers a generalization of the topic: security.stackexchange.com/questions/8861/… . It does not enumerate specific vulnerabilities (far too numerous); but specific attack patterns could usefully be enumerated.
May
20
revised Can “cat-ing” a file be a potential security risk?
added 1778 characters in body
May
16
answered Own attributes openssl
May
5
revised Can “cat-ing” a file be a potential security risk?
added 329 characters in body
Apr
30
comment Can “cat-ing” a file be a potential security risk?
I am in contact with authors, I will update answer with promised details soon.
Apr
27
awarded  Nice Answer
Apr
24
comment Can “cat-ing” a file be a potential security risk?
Will do. My speculative answer (no OS X machine to hand) on the segfault is withheld for the same reason.
Apr
24
comment Can “cat-ing” a file be a potential security risk?
I found the issue today (while searching for interesting format strings), no names or details until it's coordinated with the authors.
Apr
24
revised Can “cat-ing” a file be a potential security risk?
added 509 characters in body
Apr
24
revised Can “cat-ing” a file be a potential security risk?
updates with real examples and explanation of problem
Apr
22
answered Can “cat-ing” a file be a potential security risk?
Apr
22
comment How do I securely deal with SSL certificate validation failure when the client date is incorrect?
Also, the CAB Forum rules currently explicitly limit a subscriber (end-user) cert validity period to 5 years, and implicitly use the "not before" field as the time of issuance and hence the time ownership/entitlement was verified.
Apr
22
answered If I change any character in a private PEM, should the public PEM be different?
Apr
12
answered When given a SSL-Private-Key, how would one generate a valid SSL-Cert from this?
Apr
9
answered Is a mongodb build that uses the -ssl option vulnerable to heartbleed?
Apr
3
revised What's an easy way to perform a man-in-the-middle attack on SSL?
add sslsplit, minor clean ups