38,161 reputation
965129
bio website tltech.com
location United States
age 35
visits member for 3 years, 5 months
seen 13 hours ago

{{Hacker}}

I own a small, successful security consulting business. But by day I work for a really big company, doing really big things.

Nothing I write here represents the views of my employer, nor does it reflect any proprietary or confidental knowledge. In fact, practically all of it was written before I even started working there, so don't get too excited.


Oct
16
awarded  Great Question
Oct
15
awarded  Famous Question
Oct
15
awarded  Favorite Question
Oct
15
awarded  Notable Question
Oct
15
awarded  Good Question
Oct
15
awarded  Popular Question
Oct
15
awarded  Nice Question
Oct
15
accepted SSL3 “POODLE” Vulnerability
Oct
15
revised SSL3 “POODLE” Vulnerability
added 10 characters in body
Oct
15
revised SSL3 “POODLE” Vulnerability
added 241 characters in body
Oct
14
asked SSL3 “POODLE” Vulnerability
Oct
13
comment Can the USB standard be altered to prevent the “firmware attack”?
Short answer "No." Long answer: "Sure, just set the evil bit on all data transfer that could result in firmware modification."
Oct
12
comment Add a file as entropy source for /dev/random
Linux could do everyone a favor and take the bsd approach here. Maybe create a new char device called /dev/pedanticrandom that keeps the current entropy rules.
Oct
11
answered Is the following PayPal Vulnerability a design/implementation flaw?
Oct
11
comment Add a file as entropy source for /dev/random
@Clayton you seem to be under the impression that /dev/random does not use a CSPRNG.
Oct
11
revised Add a file as entropy source for /dev/random
added 383 characters in body
Oct
11
comment Add a file as entropy source for /dev/random
Welcome back, @Rook. You've been largely absent for a while.
Oct
11
answered Add a file as entropy source for /dev/random
Oct
7
answered How can security audits be integrated into an agile project?
Oct
5
answered What is different about being targeted by a professional attacker?