36,675 reputation
760125
bio website tltech.com
location United States
age 35
visits member for 3 years, 4 months
seen 2 hours ago

{{Hacker}}

I own a small, successful security consulting business. But by day I work for a really big company, doing really big things.

Nothing I write here represents the views of my employer, nor does it reflect any proprietary or confidental knowledge. In fact, practically all of it was written before I even started working there, so don't get too excited.


2d
awarded  Good Answer
Sep
8
comment Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?
Unfortunately, "card not present" transactions can't be protected by chip and pin, so no matter what you do to the physical card, there's a persistent "back door" built in to the system.
Sep
7
answered Can my University see what Stack exchange account I am logged into?
Sep
5
awarded  Guru
Sep
2
awarded  Good Question
Sep
2
answered Why is security through obscurity not a good option for encryption?
Sep
2
answered Where can I find good word list for MySQL 5?
Aug
30
answered Which one to ask first in multi-factor authentication?
Aug
25
awarded  Nice Answer
Aug
22
awarded  Nice Answer
Aug
21
comment Is a biometric eye scan more secure than a multi-factor authentication
@Gudradain Both the biometrics and the token together establish identity; neither does on its own. The likelihood that both will be stolen is sufficiently low to ensure security. Whether you call the biometric component identification or authentication is immaterial, as it can't do either job on its own. On the backend, biometrics are poor at the job of account selection because they provide a fuzzy match, while other forms are strictly deterministic, hence the authentication/identification distinction as described. But if you want to switch them around, it's largely just semantics.
Aug
20
comment Is a biometric eye scan more secure than a multi-factor authentication
@Gudradain eh, no. Not buying it. Something you know is dramatically easier to steal than something like an iris scan. Fingerprint sensors are exceptional because you leave the traces everywhere, but they're explicitly and intentionally not relevant to this question. But it's easy to trick someone into revealing their password or surreptitiously gathering that information. Surreptitiously gathering an iris scan is significantly less probable, and reproducing it even more so - very nearly zero. Passwords are compromised far more often than eye scans.
Aug
20
answered Is a biometric eye scan more secure than a multi-factor authentication
Aug
17
answered Drawbacks to only using TLS 1.2 ciphers in OpenSSL
Aug
16
answered Why doesn't the OS give every application a secret password?
Aug
14
comment Is it possible for a phone to be transmitting even while turned off and the battery removed?
Clearly you're not being paranoid enough for this kind of question. What if there's another battery? You won't survive long in this spy vs spy industry unless you can think outside the... er... battery compartment.
Aug
14
answered What is the difference between a virus and a worm ?
Aug
13
answered Is it possible to USB whitelist in Linux?
Aug
10
awarded  Good Answer
Aug
8
comment Why does Google allow non-HTTPS searches?
Clearly the best way to find out why Google does something is to ask someone else.