2,133 reputation
516
bio website saconsumer.com
location San Antonio, TX USA
age
visits member for 3 years, 6 months
seen yesterday

Oct
17
comment SSH key passphrase update and multiply locations
The passphrase change is not really expiring keys it is just modifying the keystrokes needed to get access to the private key locally. The public/private key pair will not be updated without complete replacement of both as that is how PKI works. Thus "...how can I update (or expire) old keys after I update the passphrase..." suggests you misunderstand the role of the passphrase.
Oct
15
comment SSH key passphrase update and multiply locations
The passphrase is only part of a local wrapper around the private key. What do you mean update the passphrase? An update of the passphrase would suggest extracting the private key and then protecting it again. Why? Suggest expire the key equates to replace the key pair.
Oct
6
comment Can a company track your browsing history if you are not connected to the company network?
Does anyone at your company have your GMail work email password? If so then they can check our Google browsing history tied to that account at any time.
Oct
2
comment Google Eclipse plugin manual telling to skip security warning. What are the risks?
stackoverflow.com/questions/13104429/…
Oct
1
comment How to store a group password for multi-user server-client web-application?
Much clearer. Still not sure why the group cert is not just provisioned by a LDAP or similar service. Only members of the group would be provided the certificate as part of their identity profile available upon authentication during normal login.
Oct
1
awarded  Quorum
Sep
30
reviewed Approve suggested edit on MySQL Authentication Hash Cracking
Sep
29
answered Application Authentication
Sep
29
comment Are python's popen (and similar) functions affected by Shellshock?
Good answer but /bin/sh is not always actually just a link to /bin/bash thus /bin/bash would be a better reference check askubuntu.com/questions/141928/…
Sep
26
comment What operating systems and devices are known to be affected by Shellshock? What patches are available?
isc.sans.edu has good links on the front page to include Cisco, Debian, and Ubuntu links. I think this should be created on Meta edited and posted as an update to the Shellshock tag detail to avoid noise and FUD (cPanel etc depend on config a fine grain issue missed by most inputs so far) . That said, I will follow your question.
Sep
26
comment Comprehensive list of shellshock attack vectors
Check isc.sans.edu reference links on their front page article as it should help address your query.
Sep
26
reviewed Approve suggested edit on Could Google Mail or Google Drive work as a path to a company's network?
Sep
25
comment what makes envirnments vulnerable/protected vs shellshock bug
They patched it in the last 24 hours or you would have gotten busted as well as stuff.
Sep
25
comment How to store a group password for multi-user server-client web-application?
So you will probably use Apache for your web server. Consider the issues around group identity in Apache and you will probably find your path forward. httpd.apache.org/docs/2.2/howto/auth.html
Sep
25
comment Is there a short command to test if my server is secure against the shellshock bash bug?
which bash might get you past a sanitized input restricting shell command path literals.
Sep
24
comment How to store a group password for multi-user server-client web-application?
What web server are you using and what user identity management/authentication are you using? My guess is Microsoft web server with Active Directory and if so you probably can guess the mechanism that suggests.
Sep
23
comment Four-factor authentication
I like 'Somewhere you are' in terms of physical point of sale such as gasoline pump and your propensity to visit that filling station. One might even add a temporal piece as in your timing pattern on visits a variation of the credit card alarm trigger for gas pump stolen card test followed by sneakers purchase. That suggests your activity relative to time and place might work too. +1 for out of the (boring and limited use) box thinking.
Sep
23
comment NFS IP spoofing
Your NFS should be protected as you suggest. The attacker would probably take on VirtualBox directly if they were coming at you and then own it all...
Sep
23
reviewed Approve suggested edit on Why do testers often use the single quote ( ' ) to test for SQL injection?
Sep
23
comment NFS IP spoofing
nfs.sourceforge.net/nfs-howto/ar01s06.html