4,474 reputation
1020
bio website
location Ireland
age
visits member for 2 years, 4 months
seen yesterday

Apr
27
comment What is the purpose of frequently rotating TLS certificates without changing underlying keys?
You can confirm a change in a private key by a change in the modulus (and possibly exponent) of the certificate. openssl x509 -subject -dates -modulus gives you easier to read output. The -pubkey output is base64 of the DER structure of a sequence of the RSA OID, the modulus and the exponent. (You cannot reliably diff base64 because it is not octet aligned, the addition of a single byte will propagate changes in the output, though it should not vary here, it could vary.)
Mar
24
comment Should I be concerned if my website throws stack information?
CWE-209: Information Exposure Through an Error Message & CWE-756: Missing Custom Error Page.
Mar
13
awarded  Good Answer
Mar
12
comment In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
@YuhongBao thanks, I've expanded the description to include this.
Mar
12
revised In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
added 2333 characters in body
Mar
11
answered Is HTTPS required for PCI Compliance when downloading desktop software patches, if no PII is transmitted, and content is digitally signed + verified?
Mar
4
revised In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
clarifications
Mar
4
answered In light of the FREAK TLS vulnerability, why do so many servers still offer RSA-EXPORT keys?
Feb
10
comment Can a malware steal the content of the clipboard?
Don't forget the disagreeable Tynt Tracer.
Feb
9
answered SSH raspberry pi security
Feb
2
revised Is there any way to block LD_PRELOAD and LD_LIBRARY_PATH on Linux?
added 477 characters in body
Jan
29
awarded  Enlightened
Jan
29
revised GHOST: which services are vulnerable, ssh, web server?
added 105 characters in body
Jan
29
awarded  Nice Answer
Jan
28
revised GHOST: which services are vulnerable, ssh, web server?
typo/braino/wording
Jan
28
revised GHOST: which services are vulnerable, ssh, web server?
added 1581 characters in body
Jan
28
answered GHOST: which services are vulnerable, ssh, web server?
Jan
28
comment GHOST bug: is there a simple way to test if my system is secure?
The GHOST.c POC originates from the original Qualys advisory.
Jan
23
comment openssl enc uses md5 to hash the password and the salt
The point of a rainbow table it to trade the cost of computation (ideally someone else's cost) with the ability to re-use. It makes no sense here (with a salt).
Jan
23
revised openssl enc uses md5 to hash the password and the salt
added 76 characters in body