29,531 reputation
545105
bio website tltech.com
location United States
age 35
visits member for 2 years, 11 months
seen 12 hours ago

I work for TL Tech solving problems like the ones you see on this site. If you're stuck and you just want someone to fix it for you, give me a call.

Contact Me


2d
revised If DNSSEC is so questionable, why is it ahead of DNSCurve in adoption?
added 774 characters in body
2d
reviewed Leave Closed Heartbleed and heap management - Why user data and passwords are kept in memory?
2d
reviewed Close What is the Address Format of XMPP?
2d
reviewed Close Cryptographic Hash function
2d
reviewed Close Where to go to get suggestions for answers to security question?
2d
reviewed Close Advice on Freelance Security Work Online/From Home/What Should I do?
2d
reviewed Close How to analyze incidents?
2d
comment Heartbleed: Why does the client supply the length of the message at all?
I imagine that if Netscape had invented SSL only about 5 to 8 years later, everything would have been encoded in XML instead of ASN.1
2d
comment Is Google Drive security compromized?
@user13107 Google Chrome does warn you in the case of known malicious and phishing sites. But this is a fingerprinting problem; the signatures change all the time, so your database is never 100% up-to-date.
2d
awarded  Enlightened
2d
awarded  Nice Answer
2d
comment Is Google Drive security compromized?
@user13107 updated answer w/ some add'l security info.
2d
revised Is Google Drive security compromized?
added 729 characters in body
2d
answered Is Google Drive security compromized?
Apr
13
answered Alternative to ICANN?
Apr
12
comment Will the recently found OpenSSL vulnerablity Heartbleed affect my public site for which I obtained an SSL certificate from a CA?
Yes. Otherwise you're using the same key, which defeats the purpose.
Apr
12
comment Defending against private key leaks such as those enabled by Heartbleed
@deed02392 it isn't an attack that can be carried out "quietly" unless the attacker is close to the victim (same coffee shop, the victim's ISP, the local oppressive government, etc). If the attacker re-routes the site traffic on the other end, it probably will be minutes (maybe even seconds) before the site owner (or their access provider) finds out and the situation escalates very quickly.
Apr
12
reviewed Approve suggested edit on How to explain Heartbleed without technical terms?
Apr
11
awarded  Nice Question
Apr
11
answered Defending against private key leaks such as those enabled by Heartbleed