2,158 reputation
516
bio website saconsumer.com
location San Antonio, TX USA
age
visits member for 3 years, 8 months
seen Dec 23 at 14:03

Dec
18
comment Securing Diskless Clients from Data Leakage
Have you considered a hardware solution with a dedicated Thin/Zero Client? Typically you can configure the server and such hardware to not allow mounting of external storage.
Dec
15
comment Securing live Ubuntu USB drive
If you routinely mount external storage or a partition on your bootable thumb drive you create a place for malware to persist and defeat the a significant portion of the Live CD/USB protection.
Dec
2
comment Including and storing the order of character entry in a password as an enhanced security measure
Your concept seems to assume that the text buffer into which you put the password tracks the order and position of characters as they are being entered (could be a problem). What application are you considering for this scheme?
Nov
26
comment Should magnetic locks automatically release in the event of a fire alarm?
@Lilenthal the OP is speaking of a collection of rooms thus the reference to building. Buildings have egress safety issues related to this question. Consider a nuclear power plant as an example.
Nov
24
answered Securing live Ubuntu USB drive
Nov
24
comment Securing live Ubuntu USB drive
So we differ on terms and techniques. It is fairly simple to roll your own ISO based thumb drive boot image which can include the latest browsers etc. That might be seem like patching but is actually a complete recreation of the image used on the thumb drive. If you have a better way to avoid updating the entire ISO press ahead.
Nov
20
comment Securing live Ubuntu USB drive
Reconsider your goal. Why not just rewrite the thumb drive with the latest and greatest. Not looking for a dialog just a suggestion. If you think loading a clean image on a drive is more problematic than your suggestion we are on different wavelengths.
Nov
7
reviewed Approve Source code security
Oct
17
comment SSH key passphrase update and multiply locations
The passphrase change is not really expiring keys it is just modifying the keystrokes needed to get access to the private key locally. The public/private key pair will not be updated without complete replacement of both as that is how PKI works. Thus "...how can I update (or expire) old keys after I update the passphrase..." suggests you misunderstand the role of the passphrase.
Oct
15
comment SSH key passphrase update and multiply locations
The passphrase is only part of a local wrapper around the private key. What do you mean update the passphrase? An update of the passphrase would suggest extracting the private key and then protecting it again. Why? Suggest expire the key equates to replace the key pair.
Oct
6
comment Can a company track your browsing history if you are not connected to the company network?
Does anyone at your company have your GMail work email password? If so then they can check our Google browsing history tied to that account at any time.
Oct
2
comment Google Eclipse plugin manual telling to skip security warning. What are the risks?
stackoverflow.com/questions/13104429/…
Oct
1
comment How to store a group password for multi-user server-client web-application?
Much clearer. Still not sure why the group cert is not just provisioned by a LDAP or similar service. Only members of the group would be provided the certificate as part of their identity profile available upon authentication during normal login.
Oct
1
awarded  Quorum
Sep
30
reviewed Approve MySQL Authentication Hash Cracking
Sep
29
answered Application Authentication
Sep
29
comment Are python's popen (and similar) functions affected by Shellshock?
Good answer but /bin/sh is not always actually just a link to /bin/bash thus /bin/bash would be a better reference check askubuntu.com/questions/141928/…
Sep
26
comment What operating systems and devices are known to be affected by Shellshock? What patches are available?
isc.sans.edu has good links on the front page to include Cisco, Debian, and Ubuntu links. I think this should be created on Meta edited and posted as an update to the Shellshock tag detail to avoid noise and FUD (cPanel etc depend on config a fine grain issue missed by most inputs so far) . That said, I will follow your question.
Sep
26
comment Comprehensive list of shellshock attack vectors
Check isc.sans.edu reference links on their front page article as it should help address your query.
Sep
26
reviewed Approve Could Google Mail or Google Drive work as a path to a company's network?