315 reputation
16
bio website
location Arizona
age
visits member for 4 years, 3 months
seen Apr 9 at 18:58

Apr
7
comment Gmail and/or Flipkey-Tripadvisor account hacked, how to prevent in the future
If you changed the password and the hacker is still able to get in then it's probably not gmail/flipkey that has been compromised, it's the computer you are using. The hacker is watching when you change passwords. My suggestion is to shut down down your computer. Borrow a friends machine and change the password on EVERY site you use. Hire a professional to back up your data, and re-install the OS on your machine.
Mar
30
awarded  Commentator
Mar
30
revised Predicting Math.random() numbers?
It's a fracking typo
Mar
30
suggested approved edit on Predicting Math.random() numbers?
Mar
23
comment What precautions I can take to secure software against user?
Right, TLS is for transport encryption. Using HMAC for authentication will prevent the man in the middle attack you describe.
Mar
4
answered Any reason for a user to use an email scanner if they don't use any offline mail clients?
Mar
4
answered What precautions I can take to secure software against user?
Mar
4
answered How to protect against random number generator attacks
Mar
4
answered Possibility to sniff HTTPS traffic on devices without installing a certificate
May
28
awarded  Yearling
Jun
1
awarded  Editor
Jun
1
revised Open source centralized authentication for heterogeneous network
added 421 characters in body
May
31
awarded  Critic
May
31
comment Open source centralized authentication for heterogeneous network
It's not the answer I'm looking for, but it may be THE answer. I'm looking to manage authentication for virtualized servers in a multi-tenant situation. Thousands of VMs with hundreds of organizations. Skillset leans towards Linux, but I do have experience with Windows. Yes, it's only authentication but I do want something that can tie into dual factor auth later on. I use other tools for configuration management. Authorization is handled by the individual virtual servers and left to the tenants.
May
31
answered Is it illegal to read an e-mail that was accidentally sent to you?
May
31
answered Best practice for creating an initial IPS policy
May
30
comment Open source centralized authentication for heterogeneous network
Problem: I don't want to maintain login/password information on all my servers individually. Solution?
May
29
awarded  Student
May
29
comment 2 factor authentication - cost effective solution for a web startup
The problems you mention are all in the implementation. For example some two factor products only require the second factor only when you log in from a new ip, or with a new cookie. Password based authentication is horribly broken, so I hope to see more sites using two factor. Hopefully we can find a sweet spot between usability and security.
May
29
comment 2 factor authentication - cost effective solution for a web startup
Not very; as they don't even have a release and haven't committed any code this year.