5,941 reputation
11035
bio website
location
age
visits member for 1 year, 11 months
seen May 11 at 5:26
stats profile views 317

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Dec
1
reviewed Reviewed As a beginner in IT Security, should I learn TCP/IP?
Dec
1
reviewed Leave Open Find the hack in the Apache2 logs?
Dec
1
reviewed Close System time and certificates
Nov
30
answered OWASP Top 10 style security guide for implementation in hardware devices
Nov
30
comment How can I send emails anonymously?
Hi @Autonomoid welcome to the site. The purpose of my questions is to help improve your answer. Part of the puropse of this site is to provide archival quality answers. This means that refering to Google or any search site is not very helpful. When an author responds to my comments by improving their answer I usually up-vote them.
Nov
29
reviewed Close Password recovery protocol for user account
Nov
29
reviewed Reviewed How safe is WSIT username authentication with symmetric key?
Nov
29
comment How safe is WSIT username authentication with symmetric key?
How secure usually depends on who your threats are. Who do you expect to try to break it and what are their motives (profit, fun, etc..)?
Nov
29
reviewed Reviewed I need explanation on how serious these vulnerabilities are?
Nov
29
comment How can I send emails anonymously?
What is the i2p network? Please provide an explanation or reference. What is Mixmaster and mixmeister and how do they provide anonymity? What headers does Gmail remove that Hotmail does not?
Nov
28
comment Is Google spying on all of us?
@mark-c-wallace Oh you must be right, since Google is in America only American standards of competence to contract matter. I'm relieved you are so well versed in international legal matters.
Nov
27
comment Is Google spying on all of us?
@xavierm02 Here is my logic explicitly. Mark's answer says that Google offers free service as long as a user accepts a contract with Google (Terms of Service). There is a trade of the user's information for the service Google provides. In order for the transaction to be valid the user must agree to give their information to Google. The problem is that the vast majority of users do not understand this agreement and are not giving consent. They have the mistaken idea that they are receiving free service. Additionally those users are not able to "control the information that google obtains".
Nov
27
comment Is Google spying on all of us?
@mark-c-wallace They are however relevent to the substance of your answer, especially the last one. You need evidence to support your argument. Please see cyber.law.harvard.edu/stjohns/Specht_v_Netscape.pdf for a case where Terms of Service was judged to be non-binding.
Nov
26
comment Is Google spying on all of us?
What percentage of users read the Terms of Service? Even when users do read the ToS do they really understand what it means? Do average users know how to configure their browsers to "control the information that google obtains about you"?
Nov
26
awarded  Custodian
Nov
26
reviewed Reviewed Is Google spying on all of us?
Nov
26
revised Is Google spying on all of us?
added 16 characters in body
Nov
26
reviewed Close How to prepare for hacking competitions
Nov
26
reviewed Close Why must VMX instructions trap?
Nov
26
reviewed Leave Open Is Google spying on all of us?