7,143 reputation
11441
bio website
location
age
visits member for 3 years, 4 months
seen Oct 15 at 7:09

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Sep
24
awarded  Autobiographer
Sep
9
reviewed Close Tools for Verifying Secure Deletion
Sep
9
reviewed Close Tool to grab sensitive information from command lines
Sep
9
reviewed Close Are there any tools for automated penetration testing of Silverlight applications?
Sep
9
reviewed Close Fuzzing tool to find heap overflows in a Windows binary
Sep
9
reviewed Close XSS Penetration Tools for OSX
Sep
9
reviewed Close Recommendations for a Certificate Management tool for Linux
Jul
16
revised How do websites tracker cookies and beacon work?
clarified title
Jul
16
reviewed Leave Open What is the point of hosting database externally?
Jul
15
reviewed Approve suggested edit on Should I add protections where I dont understand how hacker can break system?
Jun
28
reviewed Approve suggested edit on air-gap tag wiki excerpt
Jun
28
reviewed Approve suggested edit on air-gap tag wiki
Jun
4
awarded  Yearling
Jun
1
comment Physical security - responsible disclosure
Attempt to contact the security seal manufacturer directly. If that fails try e-mailing the International Seal Manufacturers Association (ISMA) ismasecurity.com/Contact-Us.html
Jun
1
reviewed Close What's the need of multiple implementations of SSL/TLS?
Jun
1
reviewed Close How does the TCP/IP lack security?
Jun
1
comment Can someone please briefly explain HIPPA compliance?
There is a fundamental problem with the question asker, and potentially others interested in the question; that HIPPA compliance, and by proxy system security is a checklist or certificate to hang on the wall. That compliance is a milestone on the way to profit. Failure on the part of technology builders to address user's privacy or security has real and lasting impact on the users. For those who don't take their responsibility seriously, the only emphasis they understand is risk to their own self-interest.
May
31
reviewed Leave Open Way to make “DNS unblockers” safe?
May
31
comment Can someone please briefly explain HIPPA compliance?
Ask your legal team: What do I need to do, so I don't go to jail?
May
31
answered Are there HIPAA requirements to encrypt our database hosted in AWS