5,921 reputation
11035
bio website
location
age
visits member for 1 year, 11 months
seen May 11 at 5:26
stats profile views 315

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Dec
20
reviewed Leave Open Examples of vulnerabilities being changed in only one (of many) places
Dec
20
reviewed Close Having a problem with NBNS spoof module in Metasploit
Dec
20
reviewed Leave Open HDI interpret Ettercap “PASS” fields?
Dec
4
comment access to email adresses
I agree. Not only is it plausible, it is likely they want your e-mail address for their own purpose. A valid e-mail address is not necesary to prevent online voting fraud for a simple photo contest. There are no free online services. There are only service offered in exchange for your information or supported by advertisement.
Dec
4
revised Would publishing a network diagram make the network less secure?
clarification and grammar
Dec
3
answered Sourcing hardware that is least likely to contain backdoors
Dec
3
reviewed Close windows firewall disabled with Norton Internet security or Norton Smart Firewall?
Dec
3
reviewed Close Encode my php script [ Help ]
Dec
3
reviewed Close Oracle ExaData Security best practice
Dec
3
reviewed Leave Open Dealing with a (possible) virus on both MacOSX and iOS
Dec
3
comment Dealing with a (possible) virus on both MacOSX and iOS
Do you sync your iPhone with your MacBook? If so, sync is a likely vector.
Dec
3
reviewed Close How do I prevent my Rails application from attack?
Dec
3
reviewed Leave Open Updated list of bad/overused passwords
Dec
3
reviewed Close What are the leading cloud-based anti-malware software according to indepedant reviews
Dec
3
comment Securing Debian Apache PHP Server
I have written and compiled SELinux modules and then bypassed their enforcement. SELinux is a tool that may be used well or poorly. Adding SELinux to a Linux based system will not necessarily make the system more secure.
Dec
1
awarded  Custodian
Dec
1
reviewed Reviewed Securing Debian Apache PHP Server
Dec
1
comment Securing Debian Apache PHP Server
Please explain how or why you believe SELinux would improve security.
Dec
1
reviewed Reviewed How effectively can ISPs detect illegal file sharing?
Dec
1
revised How effectively can ISPs detect illegal file sharing?
added 8 characters in body; edited tags