7,446 reputation
21643
bio website
location
age
visits member for 3 years, 11 months
seen May 14 at 18:13

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Apr
7
reviewed Leave Open Bash Shellshock
Apr
7
reviewed Leave Open cross client (iOS,web,android) + app server + resource (Gmail) - oAuth2, how to authenticate clients
Apr
7
reviewed Leave Open Teamviewer Security Question
Apr
7
reviewed Leave Open Generating secret keys with secret keys
Apr
7
reviewed Leave Open Why do websites ask for the last four digits of your social security number?
Apr
7
reviewed Leave Open Disallowing Similar Passwords
Apr
7
reviewed Close Possible virus hogging bandwidth
Apr
7
comment Why do websites ask for the last four digits of your social security number?
That is only for "funds transfer in the amount of $3,000 or more" and for an "originator that is not an established customer"
Apr
7
answered Password entry on OS X and keyloggers
Mar
22
reviewed Approve Caller ID Spoof and Text Spams – How do they work?
Mar
22
reviewed Approve How to protect from caller-id spoofing?
Feb
9
reviewed Close Does Linux and Mac OSX have built-in Credential/Password Managers with API access?
Feb
9
reviewed Close DoS and Hacking
Feb
9
reviewed Close Why are SSL handshakes secure and why can't a hacker look at that and decrypt the data?
Feb
9
reviewed Close Hacking Course Value (Soft)
Nov
11
awarded  Nice Answer
Nov
3
awarded  Nice Answer
Oct
22
comment How to catch a gmail hacker/money-scammer? (in conversation with one right now!)
@Nicholas I was unable to find a reference for attacks on individuals. To be fair most of my knowlege is about attacks on companies, where there are references like the Verizon Data Breach Investigations Report.
Sep
24
awarded  Autobiographer
Sep
9
reviewed Close Tools for Verifying Secure Deletion