1,930 reputation
412
bio website saconsumer.com
location San Antonio, TX USA
age
visits member for 2 years, 11 months
seen yesterday

1d
comment Is it bad to put a certificate as CA in Firefox?
PKI is about trust so you have to trust the signer of the self-signed cert and control that private key used to sign same.
Mar
27
comment Public keys without the certificates
Thin Clients on the same server? Thin Clients tend to be X windows with the actual processing running on the server. Architecturally where are A and B processing and what other users are colocated?
Mar
14
awarded  Popular Question
Feb
19
comment Why are PSTN lines not encrypted?
@AJ Yes your logic is sound but economically maximizing profits on existing racks of relays depended on managing expectations of privacy which were nil for telephones at the time. Those expectations and the revenue scheme are so changed today that it is hard for folks to understand legacy design decisions that got us here.
Feb
19
comment Why are PSTN lines not encrypted?
Plus through the 1960s multiple homes were hocked into a single party line with only the notification ring differing between parties. This popular option was the most common implementation and relied on shared 'evesdropping' ability.
Feb
4
comment BIOS spyware query
Is this hypothetical or do you have cause for concern? If so perhaps you could relate those details. All things are possible given enough time and money. "Is is likely" might be a better focus...
Jan
30
comment Industry standards for threat names
Please pass a couple of examples of the names.
Jan
27
comment How did the spammers get this address?
Keeping it very simple have you considered the actual email sent and received. Was it controlled or perhaps did it including responding to web advertisements etc?
Jan
15
answered Contents retrieved from a not protected url from content owner's server. Legal?
Jan
6
comment How to check if computer is controlled remotely
Microsoft has a 2AM routine for updating your system. You should be able to disable the autoupdate...
Dec
4
comment What are the realistic chances of email being intercepted via SMTP/TCP-IP?
Who hosts your servers? You mention US DNS services repeatedly but who decides what routing your packets travel? If your assumption is you are never going to be a target then is the organization using postcards instead of envelops? If not there lies the concern...
Dec
4
answered Access control of Linux and Bell LaPadula Model
Dec
4
comment Risks and prevention methods associated with flagging or downvoting?
Consider this site. It uses reputation gained by positive participation as a barrier to down-voting and at a cost in reputation on less - see stackoverflow.com/help/privileges/vote-down
Nov
27
answered Client Authentication by certificates in Google APP Engine java
Nov
27
comment Client Authentication by certificates in Google APP Engine java
Per the Google docs I see:Authentication options Your app can authenticate users using any one of 3 options: A Google Account An account on your Google Apps domain An OpenID identifier Since you are suggesting another option can you point to the details Google provides?
Oct
2
comment Transparent way to send logs from honeypot to logging server
You assume the attacker is on the server and can not track the ongoing logging and export process before it is packaged up via noting the services working and sockets open internally?
Sep
20
comment Biometric non revocable major flaw
So you are concerned 'Something you are' can actually be 'Something you have' for the attacker and want to convert it into 'Something you have' that resembles 'Something you are' but with math and PKI added. Suggest focusing on ensuring "Something you are' can not be 'Something you have'.
Sep
4
accepted Trust Issues Relative to Open Source
Sep
4
comment Trust Issues Relative to Open Source
Good points. I guess the technique for determining that the source for b and b' is indeed the same is the sticky point since the compilers are in the hands of others.
Sep
4
comment Trust Issues Relative to Open Source
You had me at melting the sand.