frankodwyer

1,441 reputation

411

bio	website	frankodwyer.com/blog
	location	United Kingdom
	age
visits	member for	2 years, 1 month
	seen	Nov 22 '11 at 10:35
stats	profile views	44

	1,441 reputation	bio	website	frankodwyer.com/blog	visits	member for	2 years, 1 month
411 badges		location	United Kingdom		seen	Nov 22 '11 at 10:35

summary answers questions tags badges favorites bounties reputation activity

109 Actions

suggestions reviews revisions comments badges posts accepts all

Apr 19	awarded	Yearling
Apr 19	awarded	Yearling
Dec 8	awarded	Necromancer
Sep 22	awarded	Necromancer
May 26	awarded	Nice Answer
May 13	awarded	Scholar
May 13	accepted	What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet?
May 13	comment	What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet? very useful, thanks
May 9	asked	What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet?
May 4	answered	Effect of Source Code Leakage of a security suite on security
May 2	answered	Diffie Hellman c# implementation
May 1	comment	It is safe to buy a domain if I get this message in Firefox? "If it helps, I'm running a unix like system, so can't be a keylogger or a hoax or a fishing attack." - oh yes it can (though the symptom you describe is much more likely to be a badly written website)
May 1	revised	How to tell if Firefox Home (iOS) is using Data Protection API? more info
May 1	revised	How to tell if Firefox Home (iOS) is using Data Protection API? added 14 characters in body
May 1	revised	How to tell if Firefox Home (iOS) is using Data Protection API? added note about keychains
May 1	answered	How to tell if Firefox Home (iOS) is using Data Protection API?
Apr 30	comment	Is there a way to negotiate a secret between 2 parties with no prior knowledge? I think it is really a case of whether or not you think an active attack is an acceptable risk. In an organisation's network, or some part of it, the infrastructure might be judged sufficiently difficult to actively attack. Regardless it is generally a good idea to require that an active attack is used. An active attack is typically much more difficult to do, and to conceal, than a passive one. I'm a big fan of opportunistic encryption (e.g. SSH style) for this reason.
Apr 30	answered	Biometric authentication in the real world
Apr 30	answered	Is there a way to negotiate a secret between 2 parties with no prior knowledge?
Apr 29	comment	(custom software) Security rules on each record when using user-groups per application That's why I suggested having a rule for a record with no rights, i.e. to treat records without permissions as being accessible to everyone, i.e. an implicit permission rather than an explicit one. As I said in the answer permissions can be implicit or explicit.