7,032 reputation
11440
bio website
location
age
visits member for 3 years, 1 month
seen Jul 17 at 3:39

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Aug
21
reviewed Close Starting out in IT security…what are some starting sites/books to learn from
Aug
21
comment What are the security implications of the POLi Internet Payments technique?
Welcome to IT Security. If you could limit your question to one specific aspect of security I think you will receive a better response. Perhaps a question about the implications for fraud.
Aug
20
answered Who tells that TrueCrypt is secure?
Aug
20
comment Risks of Mullions in High Security Areas
Don't your doors and walls have stuff in them? I would hope a secure door is not hollow. Are the walls hollow? What is the address again?
Aug
13
comment Risks of Mullions in High Security Areas
I would be most concerned about someone drilling through the apparently hollow mullion just to do reconnaissance on the assets inside. Sometimes knowing what is inside is all an adversary needs.
Aug
12
comment Is Windows BitLocker secure?
If the machine is off, there are no non-physical attacks that are effective. Network based attacks require a machine to be available on a network.
Aug
12
comment Secure alternative to e-mail
Security must be defined in terms of Confidentiality, Integrity, and Availability. E-mail is a method of textual communication which make transit across a public network of networks. Do you wish confidentiality of sender identity, integrity of message, restriction of access of message content to a specified recipient? Confidentiality of recipient is beyond technical application under the current concept of e-mail.
Jul
23
awarded  Nice Answer
Jun
18
revised FOUO on hosted sharepoint
added 189 characters in body
Jun
18
answered FOUO on hosted sharepoint
Jun
16
answered What security settings are likely used in Obama's Blackberry?
Jun
16
comment Can the U.S. goverment crack encryption?
Quantum computers already exist.
Jun
16
reviewed Leave Open Online POS terminal?
Jun
16
comment What are the implications of NSA surveillance on the average internet user?
I did. No one listened.
Jun
14
comment What are the implications of NSA surveillance on the average internet user?
Actually I've always cared.
Jun
13
comment When to use SSL ? / When to send passwords via mail?
Mandatory as in use HTTP go to jail? Will OWASP take away my library card?
Jun
13
comment Online only encryption
What are you trying to protect, confidentiality? And from who? Passing notes on Fermat's Last Theorem might only need rot13.
Jun
11
comment Files to monitor in linux
MD5 hash data should include file size as MD5 is vulnerablt to length extension attacks (en.wikipedia.org/wiki/Length_extension_attack)
Jun
11
answered Is any company or group working on secure hardware architectures?
Jun
4
awarded  Yearling