2,143 reputation
516
bio website saconsumer.com
location San Antonio, TX USA
age
visits member for 3 years, 7 months
seen yesterday

1d
comment Should magnetic locks automatically release in the event of a fire alarm?
@Lilenthal the OP is speaking of a collection of rooms thus the reference to building. Buildings have egress safety issues related to this question. Consider a nuclear power plant as an example.
Nov
24
answered Securing live Ubuntu USB drive
Nov
24
comment Securing live Ubuntu USB drive
So we differ on terms and techniques. It is fairly simple to roll your own ISO based thumb drive boot image which can include the latest browsers etc. That might be seem like patching but is actually a complete recreation of the image used on the thumb drive. If you have a better way to avoid updating the entire ISO press ahead.
Nov
20
comment Securing live Ubuntu USB drive
Reconsider your goal. Why not just rewrite the thumb drive with the latest and greatest. Not looking for a dialog just a suggestion. If you think loading a clean image on a drive is more problematic than your suggestion we are on different wavelengths.
Nov
7
reviewed Approve suggested edit on Source code security
Oct
17
comment SSH key passphrase update and multiply locations
The passphrase change is not really expiring keys it is just modifying the keystrokes needed to get access to the private key locally. The public/private key pair will not be updated without complete replacement of both as that is how PKI works. Thus "...how can I update (or expire) old keys after I update the passphrase..." suggests you misunderstand the role of the passphrase.
Oct
15
comment SSH key passphrase update and multiply locations
The passphrase is only part of a local wrapper around the private key. What do you mean update the passphrase? An update of the passphrase would suggest extracting the private key and then protecting it again. Why? Suggest expire the key equates to replace the key pair.
Oct
6
comment Can a company track your browsing history if you are not connected to the company network?
Does anyone at your company have your GMail work email password? If so then they can check our Google browsing history tied to that account at any time.
Oct
2
comment Google Eclipse plugin manual telling to skip security warning. What are the risks?
stackoverflow.com/questions/13104429/…
Oct
1
comment How to store a group password for multi-user server-client web-application?
Much clearer. Still not sure why the group cert is not just provisioned by a LDAP or similar service. Only members of the group would be provided the certificate as part of their identity profile available upon authentication during normal login.
Oct
1
awarded  Quorum
Sep
30
reviewed Approve suggested edit on MySQL Authentication Hash Cracking
Sep
29
answered Application Authentication
Sep
29
comment Are python's popen (and similar) functions affected by Shellshock?
Good answer but /bin/sh is not always actually just a link to /bin/bash thus /bin/bash would be a better reference check askubuntu.com/questions/141928/…
Sep
26
comment What operating systems and devices are known to be affected by Shellshock? What patches are available?
isc.sans.edu has good links on the front page to include Cisco, Debian, and Ubuntu links. I think this should be created on Meta edited and posted as an update to the Shellshock tag detail to avoid noise and FUD (cPanel etc depend on config a fine grain issue missed by most inputs so far) . That said, I will follow your question.
Sep
26
comment Comprehensive list of shellshock attack vectors
Check isc.sans.edu reference links on their front page article as it should help address your query.
Sep
26
reviewed Approve suggested edit on Could Google Mail or Google Drive work as a path to a company's network?
Sep
25
comment what makes envirnments vulnerable/protected vs shellshock bug
They patched it in the last 24 hours or you would have gotten busted as well as stuff.
Sep
25
comment How to store a group password for multi-user server-client web-application?
So you will probably use Apache for your web server. Consider the issues around group identity in Apache and you will probably find your path forward. httpd.apache.org/docs/2.2/howto/auth.html
Sep
25
comment Is there a short command to test if my server is secure against the shellshock bash bug?
which bash might get you past a sanitized input restricting shell command path literals.