2,183 reputation
516
bio website saconsumer.com
location San Antonio, TX USA
age
visits member for 3 years, 9 months
seen yesterday

Jan
28
reviewed Approve How to find what has been added to my hard drive
Jan
28
comment How to find what has been added to my hard drive
This may help stackoverflow.com/questions/9234207/…
Jan
8
comment Storing plaintext passwords for cameras - Security concerns?
@Alexander your assumption may be correct but why not let the OP answer? The query comes from the step where multiple devices are provided simplified access and the design dependencies related to that feature.
Jan
8
answered Does Windows Embedded OS supports Microsoft Bitlocker?
Jan
8
comment Storing plaintext passwords for cameras - Security concerns?
So when I buy your system of cameras I also need to ensure you stay in business and remain live on the internet? If you fail to maintain your database or it gets zapped by nature or human my suite of cameras are no longer functional?
Jan
7
comment Deduplication: Encrypting the SHA-256 hash of a file chunk
Where does your hash reside in its encrypted state and will the same hash always encrypt to the same result? Perhaps a bit more about the plan in its current state (to include chunk size and boundaries) would help us provide an answer to downsides and inefficiencies (storage systems need to be fast as a rule).
Dec
29
comment Setup local Certificate Authority & integrate with SCEP
OpenSSL provides the routines needed to created a CA which solves the technical need. Consider that the value of a CA is related to the trust chain based on assumed information control and thus protecting the CA's private key is extremely important.
Dec
18
comment Securing Diskless Clients from Data Leakage
Have you considered a hardware solution with a dedicated Thin/Zero Client? Typically you can configure the server and such hardware to not allow mounting of external storage.
Dec
15
comment Securing live Ubuntu USB drive
If you routinely mount external storage or a partition on your bootable thumb drive you create a place for malware to persist and defeat the a significant portion of the Live CD/USB protection.
Dec
2
comment Including and storing the order of character entry in a password as an enhanced security measure
Your concept seems to assume that the text buffer into which you put the password tracks the order and position of characters as they are being entered (could be a problem). What application are you considering for this scheme?
Nov
26
comment Should magnetic locks automatically release in the event of a fire alarm?
@Lilenthal the OP is speaking of a collection of rooms thus the reference to building. Buildings have egress safety issues related to this question. Consider a nuclear power plant as an example.
Nov
24
answered Securing live Ubuntu USB drive
Nov
24
comment Securing live Ubuntu USB drive
So we differ on terms and techniques. It is fairly simple to roll your own ISO based thumb drive boot image which can include the latest browsers etc. That might be seem like patching but is actually a complete recreation of the image used on the thumb drive. If you have a better way to avoid updating the entire ISO press ahead.
Nov
20
comment Securing live Ubuntu USB drive
Reconsider your goal. Why not just rewrite the thumb drive with the latest and greatest. Not looking for a dialog just a suggestion. If you think loading a clean image on a drive is more problematic than your suggestion we are on different wavelengths.
Nov
7
reviewed Approve Source code security
Oct
17
comment SSH key passphrase update and multiply locations
The passphrase change is not really expiring keys it is just modifying the keystrokes needed to get access to the private key locally. The public/private key pair will not be updated without complete replacement of both as that is how PKI works. Thus "...how can I update (or expire) old keys after I update the passphrase..." suggests you misunderstand the role of the passphrase.
Oct
15
comment SSH key passphrase update and multiply locations
The passphrase is only part of a local wrapper around the private key. What do you mean update the passphrase? An update of the passphrase would suggest extracting the private key and then protecting it again. Why? Suggest expire the key equates to replace the key pair.
Oct
6
comment Can a company track your browsing history if you are not connected to the company network?
Does anyone at your company have your GMail work email password? If so then they can check our Google browsing history tied to that account at any time.
Oct
2
comment Google Eclipse plugin manual telling to skip security warning. What are the risks?
stackoverflow.com/questions/13104429/…
Oct
1
comment How to store a group password for multi-user server-client web-application?
Much clearer. Still not sure why the group cert is not just provisioned by a LDAP or similar service. Only members of the group would be provided the certificate as part of their identity profile available upon authentication during normal login.