5,921 reputation
11035
bio website
location
age
visits member for 1 year, 11 months
seen May 11 at 5:26
stats profile views 315

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Feb
5
reviewed Needs Improvement What does a HTML filter need to do, to protect against SVG attacks?
Feb
5
reviewed Needs Improvement Is it useful to determine the name of the server software while doing a penetration test?
Feb
5
awarded  Custodian
Feb
5
reviewed Satisfactory How much should I care about the iOS/Android version when pentesting mobile app?
Jan
28
reviewed Close Is There a Premium Rate Phone Check?
Jan
22
reviewed Leave Open Backup TrueCrypt hidden volume
Jan
22
reviewed Close Foolproof Jailbreak detection?
Jan
22
reviewed Close Best Practice: “One per-user ssh key” or “multiple per-host ssh keys”
Jan
22
reviewed Close GnuPG implementations are not cross-compatible?
Jan
22
revised Penetration testing against an ignorant target - Is it legal?
deleted 54 characters in body
Jan
22
reviewed Leave Open Data remanence on mobile devices
Jan
16
awarded  Informed
Jan
16
reviewed Close Safely transfer UserID among different Subdomains
Jan
16
reviewed Close Breaking out of attribute in double quotes
Jan
16
comment Is it possible for a third party to sniff data off the line to an ISP and determine what the user is doing?
Isn't the most democratic country in the world ancient Greece?
Jan
16
answered Is privacy a part of security? (Bruce Schneier)
Jan
9
reviewed Close What sort of delay will deter a robot from crawling my site?
Jan
8
comment What is the most secure way for two people to communicate?
Are you looking to prevent the person with whom you are communicating from discovering your identity?
Jan
8
answered Risk Control - Ignored risks and accepted risks
Jan
8
answered If we know CAPTCHA can be beat, why are we still using them?