194 reputation
16
bio website
location
age
visits member for 1 year, 7 months
seen Mar 9 at 4:29

Jul
2
awarded  Curious
Apr
16
awarded  Notable Question
Nov
12
awarded  Popular Question
May
2
comment Example of malware that spreads via USB?
Yea - I sortof expected to receive this kind of reception - I'm not looking for malware per se, just a resource - google was remarkedly unproductive.
May
2
asked Example of malware that spreads via USB?
Apr
22
asked IPSec AH + ESP used together
Feb
27
comment How high is the entropy of this salt-generating code? (No code-reading actually necessary)
Ah, thank you very much - a SQL database is involved, so I believe a 4-byte integer that increments automatically is very, very feasible/easy to implement.
Feb
27
accepted How high is the entropy of this salt-generating code? (No code-reading actually necessary)
Feb
27
asked How high is the entropy of this salt-generating code? (No code-reading actually necessary)
Feb
27
comment How can I set up signed downloads?
Also I should have explicitly stated that I was operating within the bounds of the HIPAA act - so I can't use encrypted public downloads as encrypted health information is probably still considered health information (I don't know for sure, kinda curious now), and distributing it would probably violate HIPAA
Feb
27
comment How can I set up signed downloads?
Just wanted to note that the connect method in the SqlSrv (microsoft SQL) API supports setting "Encrypt" to true, which then uses the operating environment's configured cryptographic primitives (so FIPS 140-2 compliant if that is configured). Also you can choose to not trust self-signed certificates when connecting to the database as another member of the same associative array argument that serves as part of the input 2-tuple for the connect method
Feb
27
comment How can I set up signed downloads?
Sorry I should have rephrased that - the HTTP page that loads initially (something.com) immediately redirects to "something.com/"; before user authentication
Feb
27
comment How can I set up signed downloads?
Yea I established TLS w/ a self-signed certificate and wrote the PHP scripts for a sanitized SQL-database based login using salted hashes. I was concerned about how to create another authentication vector (something the user has) in the form of a token and relate it to a specific download.
Feb
27
accepted How can I set up signed downloads?
Feb
27
accepted All I see is RPC, how do I proceed?
Feb
25
comment All I see is RPC, how do I proceed?
I see. So I must be like Kirk and rewrite the VM lab to introduce a vulnerability that allows me to succeed?..So I don't attack the other machine on the VM network, but I attack the hyperviser and modify the virtual environment...
Feb
25
asked All I see is RPC, how do I proceed?
Feb
24
comment Exporting data beyond a cryptographic boundary
I managed to get all of that covered except the encrypted link between the web server and the DB back-end. I'm not sure how to implement that in PHP.
Feb
24
asked How can I set up signed downloads?
Feb
19
revised Exporting data beyond a cryptographic boundary
edited tags