467 reputation
57
bio website
location
age
visits member for 3 years
seen Apr 16 at 8:17

Jan
24
awarded  Civic Duty
Jun
12
awarded  Notable Question
Apr
13
awarded  Yearling
Mar
18
comment Does allowing everyone know when a server process was started pose a security risk?
@zedman9991: Whatever. What if a "malicious user" knows when my server process was started or something like that is what I want to know. Impersonation, credentials, all that stuff are all implementation details.
Mar
18
asked Does allowing everyone know when a server process was started pose a security risk?
Mar
5
awarded  Editor
Mar
5
revised Why are SSL certificates valid only from a certain date?
edited title
Mar
5
asked Why are SSL certificates valid only from a certain date?
Mar
1
accepted Why do we not trust an SSL certificate that expired recently?
Feb
25
awarded  Good Question
Feb
25
awarded  Popular Question
Feb
25
awarded  Nice Question
Feb
25
comment Why do we not trust an SSL certificate that expired recently?
@Shadur: Never heard of being poisoned by an SSL certificate.
Feb
25
awarded  Yearling
Feb
25
asked Why do we not trust an SSL certificate that expired recently?
Dec
13
asked Does including decorative HTTP headers into server reply pose extra security risk?
Jun
14
asked Does concealing server software versions have a notable effect on security?
Feb
7
comment Legal Risk to unpatched servers
Illegal files are one problem. Becoming part of a botnet is another - their computers can be used to actively attack something - will they like that?
Sep
22
comment How should I determine if an application transmits my credentials securely?
+1, true, but actual analysis of a complex third-party program can be very difficult.
Aug
15
accepted Is there a common name for a software defect that leads to unexpected transfer of secret over the wire?