7,366 reputation
21443
bio website
location
age
visits member for 3 years, 10 months
seen 8 hours ago

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Apr
7
reviewed Leave Open Bash Shellshock
Apr
7
reviewed Leave Open cross client (iOS,web,android) + app server + resource (Gmail) - oAuth2, how to authenticate clients
Apr
7
reviewed Leave Open Teamviewer Security Question
Apr
7
reviewed Leave Open Generating secret keys with secret keys
Apr
7
reviewed Leave Open Why do websites ask for the last four digits of your social security number?
Apr
7
reviewed Close Outlook not updating certificate
Apr
7
reviewed Leave Open Disallowing Similar Passwords
Apr
7
reviewed Close Can a subprocess launched from a parent executable access the memory of its parent?
Apr
7
reviewed Close Possible virus hogging bandwidth
Apr
7
comment Why do websites ask for the last four digits of your social security number?
That is only for "funds transfer in the amount of $3,000 or more" and for an "originator that is not an established customer"
Apr
7
answered Password entry on OS X and keyloggers
Mar
22
reviewed Approve Caller ID Spoof and Text Spams – How do they work?
Mar
22
reviewed Approve How to protect from caller-id spoofing?
Feb
9
reviewed Close Does Linux and Mac OSX have built-in Credential/Password Managers with API access?
Feb
9
reviewed Close DoS and Hacking
Feb
9
reviewed Close Why are SSL handshakes secure and why can't a hacker look at that and decrypt the data?
Feb
9
reviewed Close Hacking Course Value (Soft)
Nov
11
awarded  Nice Answer
Nov
3
awarded  Nice Answer
Oct
22
comment How to catch a gmail hacker/money-scammer? (in conversation with one right now!)
@Nicholas I was unable to find a reference for attacks on individuals. To be fair most of my knowlege is about attacks on companies, where there are references like the Verizon Data Breach Investigations Report.