Reputation
1,055
Next privilege 2,000 Rep.
Edit questions and answers
Badges
7 13
Impact
~16k people reached

Feb
16
comment Allow access only for some Mac Ids
To give a real world analogy of the problem: Imagine you own a club that only lets people named Scott in, if when Mr. Deters here tries to go in he just says his name is Scott Chamberlain the bouncer at the door will happily let him in. You have no way of verifying the identity of a MAC address the computer gave you is the real address. Now if the bouncer asked for some form of ID from a trusted 3rd party that you knew would not give out fake IDs (client certificates) then the problem would be solved.
Jan
29
comment Encryption and Deniability
Just to be sure, You don't care that you can prove Alice had K in her position at some point? If K is random and not reused, in most places that is enough "evidence" that Alice did send the message.
Dec
6
revised Does a simple mobile REST API need HTTPS?
added 115 characters in body
Dec
6
answered Does a simple mobile REST API need HTTPS?
Nov
17
comment How does hashing work?
@Griffin It prevents the re-use of work. If two users use the same password and you don't have a salt it will produce the same hash. If an attacker cracks one users password by correctly guessing it he now has all of the users passwords who used that same password. By adding a random salt per user it makes the attacker unable to re-use his guesses he made for a previous user on the next user.
Nov
15
comment Transmission of messages
That is the point of the secure link, if you use something like SSL correctly (checking that the cert you receive from the server is the cert you expected to see) it can't be intercepted.
Nov
14
revised Transmission of messages
added 1 characters in body
Nov
14
answered Transmission of messages
Nov
4
comment Transmitting malicious code over audio speakers
You are right, I have removed the claim.
Nov
4
revised Transmitting malicious code over audio speakers
deleted 143 characters in body
Nov
4
revised Transmitting malicious code over audio speakers
added 16 characters in body
Nov
3
answered Transmitting malicious code over audio speakers
Oct
9
comment Totally secure public key distrubition
You just say "a CA" can be subverted are you ruling out ALL solutions that involve a 3rd party (for example a "Web of Trust", or a private CA)?
Sep
11
comment Do the Windows shared source files compile into the same binaries as the retail version?
One big thing that will not be in ANY code sharing database will be the private keys to sign the files. Most of the "important" DLL's in windows (ntdll.dll, clfs.dll, ect...) are all digitally signed and there is no way to re-create that without the keys from Microsoft.
Aug
30
comment How do I mitigate a MITM on https?
I find that not as likely (I don't see a reason they would store the start time) however I very easily could see a math bug for calculating the correct time zone offset.
Aug
30
comment How do I mitigate a MITM on https?
I think you where close, Look at the "Not valid before" time, I think he connected too early (or at least his machine thought it was too early) for the certificate to be valid.
Aug
30
answered How do I mitigate a MITM on https?
Aug
27
comment Man in the middle attack still possible against ssl?
You may want to add something about Strict Transport Security as a countermeasure too.
Aug
2
comment Why would one increment card security code for a new payment card
@NathanC Heck no, stay away from the lottery for the rest of your life! You used up your one lucky chance you get already.
Aug
2
awarded  Citizen Patrol