46,990 reputation
1382150
bio website tltech.com
location United States
age 36
visits member for 4 years, 3 months
seen yesterday

{{Hacker}}

Long-time owner and operator of a small, successful security consulting business. As of recently, though, by day I work for a really big company.

Nothing I write here represents the views of my employer, nor does it reflect any proprietary or confidential knowledge. In fact, practically all of it was written before I even started working there, so don't get too excited.


Jul
25
awarded  Constituent
Jul
21
comment Should I implement incorrect password delay in a website or a webservice?
@IanRingrose AS_DESIGNED
Jul
21
comment Should I implement incorrect password delay in a website or a webservice?
@IanRingrose most installations don't have enough users for that to be possible. Those that do probably don't need this sort of advice.
Jul
21
answered Should I implement incorrect password delay in a website or a webservice?
Jul
17
awarded  Caucus
Jul
12
awarded  Good Answer
Jun
30
answered Does splitting RNG into “private” and “public” entropy sources reduce risks of compromise?
Jun
30
awarded  Guru
Jun
30
awarded  Custodian
Jun
26
awarded  Notable Question
Jun
16
revised where to store a key for encryption
added 1183 characters in body
Jun
7
awarded  Famous Question
Jun
1
awarded  Announcer
Jun
1
awarded  Nice Answer
May
28
revised OpenVPN dhparam
new content
May
28
revised OpenVPN dhparam
new content
May
28
revised OpenVPN dhparam
new content
May
27
awarded  Good Answer
May
24
awarded  Nice Answer
May
23
comment If DNSSEC is so questionable, why is it ahead of DNSCurve in adoption?
@cnst That's explained in my answer and my previous comment. A mitm can change the response to the root/TLD query, and there's no way for you to know.