1,010 reputation
412
bio website
location Oshkosh, WI
age 30
visits member for 3 years, 8 months
seen yesterday
Software developer.

Nov
14
revised Transmission of messages
added 1 characters in body
Nov
14
answered Transmission of messages
Nov
4
comment Transmitting malicious code over audio speakers
You are right, I have removed the claim.
Nov
4
revised Transmitting malicious code over audio speakers
deleted 143 characters in body
Nov
4
revised Transmitting malicious code over audio speakers
added 16 characters in body
Nov
3
answered Transmitting malicious code over audio speakers
Oct
9
comment Totally secure public key distrubition
You just say "a CA" can be subverted are you ruling out ALL solutions that involve a 3rd party (for example a "Web of Trust", or a private CA)?
Sep
11
comment Do the Windows shared source files compile into the same binaries as the retail version?
One big thing that will not be in ANY code sharing database will be the private keys to sign the files. Most of the "important" DLL's in windows (ntdll.dll, clfs.dll, ect...) are all digitally signed and there is no way to re-create that without the keys from Microsoft.
Aug
30
comment How do I mitigate a MITM on https?
I find that not as likely (I don't see a reason they would store the start time) however I very easily could see a math bug for calculating the correct time zone offset.
Aug
30
comment How do I mitigate a MITM on https?
I think you where close, Look at the "Not valid before" time, I think he connected too early (or at least his machine thought it was too early) for the certificate to be valid.
Aug
30
answered How do I mitigate a MITM on https?
Aug
27
comment Man in the middle attack still possible against ssl?
You may want to add something about Strict Transport Security as a countermeasure too.
Aug
2
comment Why would one increment card security code for a new payment card
@NathanC Heck no, stay away from the lottery for the rest of your life! You used up your one lucky chance you get already.
Aug
2
awarded  Citizen Patrol
Jul
18
comment Can I avoid DNS spoofing by typing the IP address?
A good example of this, go ping security.stackexcange.com and you will likely get the ip 198.252.206.16, but if you visit that IP, you do not get this website.
Jun
23
comment Why can a Tor exit node decrypt data, but not the entry node?
@bonsaiviking Ahh, I see. You are the first person ever to be able to explain that. So its Me<--(TCP connection 1)-->Tor Entry point<--(Tor Protocol Stream)-->Tor Server<--(Tor Protocol Stream)-->Tor Server<--(Tor Protocol Stream)->Tor Exit Point<--(TCP connection 2)-->Destination Server So I only have a TCP connection to the entry point and the final destination only has a TCP connection to the exit point.
Jun
21
comment Routable Domain for DC?
To see a related topic to what Gordan talked about, see this old quetsion of mine.
Jun
2
accepted How to stop/detect someone else registering a certificate for my domain
Jun
2
asked How to stop/detect someone else registering a certificate for my domain
Jun
1
comment Recover Server 2008 R2 Domain Admin Password
Last question, is this the domain controller or just a server on the domain.