310 reputation
16
bio website
location Arizona
age
visits member for 3 years, 10 months
seen yesterday

1d
awarded  Commentator
1d
revised Predicting Math.random() numbers?
It's a fracking typo
1d
suggested approved edit on Predicting Math.random() numbers?
Mar
23
comment What precautions I can take to secure software against user?
Right, TLS is for transport encryption. Using HMAC for authentication will prevent the man in the middle attack you describe.
Mar
4
answered Any reason for a user to use an email scanner if they don't use any offline mail clients?
Mar
4
answered What precautions I can take to secure software against user?
Mar
4
answered How to protect against random number generator attacks
Mar
4
answered Possibility to sniff HTTPS traffic on devices without installing a certificate
May
28
awarded  Yearling
Jun
1
awarded  Editor
Jun
1
revised Open source centralized authentication for heterogeneous network
added 421 characters in body
May
31
awarded  Critic
May
31
comment Open source centralized authentication for heterogeneous network
It's not the answer I'm looking for, but it may be THE answer. I'm looking to manage authentication for virtualized servers in a multi-tenant situation. Thousands of VMs with hundreds of organizations. Skillset leans towards Linux, but I do have experience with Windows. Yes, it's only authentication but I do want something that can tie into dual factor auth later on. I use other tools for configuration management. Authorization is handled by the individual virtual servers and left to the tenants.
May
31
answered Is it illegal to read an e-mail that was accidentally sent to you?
May
31
answered Best practice for creating an initial IPS policy
May
30
comment Open source centralized authentication for heterogeneous network
Problem: I don't want to maintain login/password information on all my servers individually. Solution?
May
29
awarded  Student
May
29
comment 2 factor authentication - cost effective solution for a web startup
The problems you mention are all in the implementation. For example some two factor products only require the second factor only when you log in from a new ip, or with a new cookie. Password based authentication is horribly broken, so I hope to see more sites using two factor. Hopefully we can find a sweet spot between usability and security.
May
29
comment 2 factor authentication - cost effective solution for a web startup
Not very; as they don't even have a release and haven't committed any code this year.
May
29
comment 2 factor authentication - cost effective solution for a web startup
I use Google's two factor auth with gmail and can tell you that it is a well implemented and well thought out platform.