531 reputation
411
bio website mikestechspot.blogspot.com
location Detroit, MI
age 29
visits member for 1 year, 11 months
seen yesterday

Too Many Interests to list, SE accounts speak for themselves. Christian, Programmer, IT Professional, Embedded enthusiast, chess player, the list goes on.


Interested in all things Embedded?

Stack Exchange Q&A site proposal: Embedded Systems Programming and Design


1d
comment Why does Windows Ship with Expired SSL Certificates?
@ruakh yes, I actually upvoted that answer back in the day when it was popular just because it was popular, without fact checking first, because it sounds like it should be right. You can see my recent comment here, it's only half true. By default CAs do not include that information, but at least RedHat and Microsoft CAs have options to include that information. You honestly brought up a good point though.
1d
comment Why do we not trust an SSL certificate that expired recently?
This is only half true, RedHat says: By default, CRLs do not contain information about revoked expired certificates. The server can include revoked expired certificates by enabling that option for the issuing point. Microsoft also says ...You can enable a registry setting on a CA to ensure that revoked certificates that have expired are not removed from the CRL.
1d
comment Why does Windows Ship with Expired SSL Certificates?
also @ruakh if the certificate has been revoked, it doesn't matter if it's expired or not, revokation kicks in if there is CRL checking enabled. So, unless the server knows it's compromised, it has to assume it isn't. It can still check the CRL for expired certs.
1d
awarded  Guru
2d
awarded  Good Answer
2d
comment Why does Windows Ship with Expired SSL Certificates?
Thanks @Josef, I figured but I didn't want to conjecture without actual proof, I'm not what you call a PKI expert, yet
2d
comment Why does Windows Ship with Expired SSL Certificates?
@Cthulhu if they signed something before they were expired then that makes that signature valid, according to Microsoft
2d
awarded  Mortarboard
2d
awarded  Enlightened
2d
awarded  Nice Answer
2d
awarded  Yearling
2d
answered Why does Windows Ship with Expired SSL Certificates?
Jun
27
comment How can I watch porn, safely, and not get a virus? (and not infect corporate data also)
youtube.com/watch?v=QSKBoO5hBHk
Jun
27
comment Are popular porn sites more likely to be infected with malware?
a 'friend', riiiight.
May
29
revised Are there any reasonable TrueCrypt forks?
Removed speculation; It's still hearsay at this point.
May
29
suggested approved edit on Are there any reasonable TrueCrypt forks?
May
12
comment Why do I hear about so many Java insecurities? Are other languages more secure?
Only beefs I have with this answer is that 1) Heartbleed was not the result of a buffer overflow attack. 2) You also cannot say that a language coupled with a virtual machine is 'better' than another language by itself, for obvious reasons. Other than that, good note about the real holes being in that sandbox, a programming language is no more 'safe' or 'unsafe' than a human language, it all boils down to a compiler or interpreter, and most important: The person using the language.
Apr
16
comment Are there “secure” languages?
@DavidYoung I've proposed an edit to this question, the most well defined term for this to date is a Buffer Over-Read.
Apr
16
revised Are there “secure” languages?
Corrected the actual name of the coding overlook and resulting exploit, with citation.
Apr
16
suggested approved edit on Are there “secure” languages?