3,792 reputation
618
bio website
location Ireland
age
visits member for 1 year, 10 months
seen 2 days ago

2d
awarded  Nice Answer
Nov
13
comment Can the Windows Schannel vulnerability be exploited by visiting a website?
Microsoft say "if an attacker sends specially crafted packets to a windows server". Qualsys says "both server and client roles".
Nov
13
revised Security of pronounceable passwords
added 864 characters in body
Nov
13
revised Security of pronounceable passwords
added 359 characters in body
Nov
12
answered Security of pronounceable passwords
Nov
12
comment Can the Windows Schannel vulnerability be exploited by visiting a website?
The "patch" also adds four new ciphers, interference or coincidence? ;-)
Nov
6
comment Do we really need a long and complicated password for websites?
@drpexe you overestimate the diligence of users: stricture-group.com/files/adobe-top100.txt
Oct
31
comment Scanning documents and ISO-27001
ISO 15801 is also relevant.
Oct
31
comment Validating an SSL certificate chain according to RFC 5280: Am I understanding this correctly?
I've updated, but lacking details of the certificates it's hard to be precise... Also, you are certain that your implementation can correctly handle SHA-256?
Oct
31
revised Validating an SSL certificate chain according to RFC 5280: Am I understanding this correctly?
added 663 characters in body
Oct
31
answered Validating an SSL certificate chain according to RFC 5280: Am I understanding this correctly?
Oct
31
answered What are the security risks associated with PDF files?
Oct
22
comment One liner to create passwords in linux?
It depends on the version of coreutils/shuf, it used to use /dev/urandom, this was undone in the shared randread code (affecting multiple tools) in coreutils-7.3 due to poor performance of shred. Insert face in palm.
Oct
17
comment Bash command argument security
See also openssl.org/docs/apps/openssl.html#PASS_PHRASE_ARGUMENTS for OpenSSL's take on this.
Oct
17
awarded  Critic
Oct
17
comment Bash command argument security
Both using a variable or substitution on the command line almost certainly expose it to other users via ps (and/or /proc), the shell expands them first. Try it and see: echo 60 > password.txt; sleep $(cat password.txt) & ps -fp $!
Oct
16
revised How nmap guesses the operating system?
added 187 characters in body
Oct
16
answered How nmap guesses the operating system?
Oct
15
answered PKI expired and renewed, do my correspondents have to do anything?
Oct
15
awarded  Organizer