7,474 reputation
21744
bio website
location
age
visits member for 4 years, 2 months
seen Jul 17 at 19:58

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Apr
7
reviewed Close iOS permissions for 3rd party app developers
Apr
7
reviewed Close Why companies do not simply use hackers' tools to find their own vulnerabilities prior to the release of their software?
Apr
7
revised Password entry on OS X and keyloggers
adding info about key splits
Apr
7
reviewed Close SSL Handshakes and authentication?
Apr
7
reviewed Close Why is my Wi-Fi constantly in use?
Apr
7
reviewed Leave Open VPN detection with installed client
Apr
7
reviewed Leave Open Bash Shellshock
Apr
7
reviewed Leave Open cross client (iOS,web,android) + app server + resource (Gmail) - oAuth2, how to authenticate clients
Apr
7
reviewed Leave Open Teamviewer Security Question
Apr
7
reviewed Leave Open Generating secret keys with secret keys
Apr
7
reviewed Leave Open Why do websites ask for the last four digits of your social security number?
Apr
7
reviewed Leave Open Disallowing Similar Passwords
Apr
7
reviewed Close Possible virus hogging bandwidth
Apr
7
comment Why do websites ask for the last four digits of your social security number?
That is only for "funds transfer in the amount of $3,000 or more" and for an "originator that is not an established customer"
Apr
7
answered Password entry on OS X and keyloggers
Mar
22
reviewed Approve Caller ID Spoof and Text Spams – How do they work?
Mar
22
reviewed Approve How to protect from caller-id spoofing?
Feb
9
reviewed Close Does Linux and Mac OSX have built-in Credential/Password Managers with API access?
Feb
9
reviewed Close DoS and Hacking
Feb
9
reviewed Close Why are SSL handshakes secure and why can't a hacker look at that and decrypt the data?