meta user
network profile
| bio | website | |
|---|---|---|
| location | ||
| age | ||
| visits | member for | 1 year, 11 months |
| seen | May 11 at 5:26 | |
| stats | profile views | 314 |
The first rule of security is: you do not invent security protocols.
The second rule of security is: you do not invent security protocols!
The third rule of security is: if this is your first time with security you do not invent security protocols.
Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.
(Not dead.)
|
May 4 |
comment |
I'm being followed on the web. Explanations for mysterious behavior actually TLA's do use stupid tactics see:ifixit.com/Teardown/Tracking+Device+Teardown/5250/1 |
|
Mar 4 |
comment |
Choosing an SSL certificate provider Welcome to IT Security. Please explain the security issue you are interested in. If you are only interested in device usage and compatability your question may be better answered on a different site. |
|
Feb 27 |
comment |
Possible ways to test security for Windows Phone 7 or iOS devices Welcome to IT Sec. I am unable to see any security relevant issues in your question. Please give the security relevant issues you are interested in. If there are no security relevant issues then the question belongs on a different site. |
|
Jan 16 |
comment |
Is it possible for a third party to sniff data off the line to an ISP and determine what the user is doing? Isn't the most democratic country in the world ancient Greece? |
|
Jan 8 |
comment |
What is the most secure way for two people to communicate? Are you looking to prevent the person with whom you are communicating from discovering your identity? |
|
Dec 4 |
comment |
access to email adresses I agree. Not only is it plausible, it is likely they want your e-mail address for their own purpose. A valid e-mail address is not necesary to prevent online voting fraud for a simple photo contest. There are no free online services. There are only service offered in exchange for your information or supported by advertisement. |
|
Dec 3 |
comment |
Dealing with a (possible) virus on both MacOSX and iOS Do you sync your iPhone with your MacBook? If so, sync is a likely vector. |
|
Dec 3 |
comment |
Securing Debian Apache PHP Server I have written and compiled SELinux modules and then bypassed their enforcement. SELinux is a tool that may be used well or poorly. Adding SELinux to a Linux based system will not necessarily make the system more secure. |
|
Dec 1 |
comment |
Securing Debian Apache PHP Server Please explain how or why you believe SELinux would improve security. |
|
Nov 30 |
comment |
How can I send emails anonymously? Hi @Autonomoid welcome to the site. The purpose of my questions is to help improve your answer. Part of the puropse of this site is to provide archival quality answers. This means that refering to Google or any search site is not very helpful. When an author responds to my comments by improving their answer I usually up-vote them. |
|
Nov 29 |
comment |
How safe is WSIT username authentication with symmetric key? How secure usually depends on who your threats are. Who do you expect to try to break it and what are their motives (profit, fun, etc..)? |
|
Nov 29 |
comment |
How can I send emails anonymously? What is the i2p network? Please provide an explanation or reference. What is Mixmaster and mixmeister and how do they provide anonymity? What headers does Gmail remove that Hotmail does not? |
|
Nov 28 |
comment |
Is Google spying on all of us? @mark-c-wallace Oh you must be right, since Google is in America only American standards of competence to contract matter. I'm relieved you are so well versed in international legal matters. |
|
Nov 27 |
comment |
Is Google spying on all of us? @xavierm02 Here is my logic explicitly. Mark's answer says that Google offers free service as long as a user accepts a contract with Google (Terms of Service). There is a trade of the user's information for the service Google provides. In order for the transaction to be valid the user must agree to give their information to Google. The problem is that the vast majority of users do not understand this agreement and are not giving consent. They have the mistaken idea that they are receiving free service. Additionally those users are not able to "control the information that google obtains". |
|
Nov 27 |
comment |
Is Google spying on all of us? @mark-c-wallace They are however relevent to the substance of your answer, especially the last one. You need evidence to support your argument. Please see cyber.law.harvard.edu/stjohns/Specht_v_Netscape.pdf for a case where Terms of Service was judged to be non-binding. |
|
Nov 26 |
comment |
Is Google spying on all of us? What percentage of users read the Terms of Service? Even when users do read the ToS do they really understand what it means? Do average users know how to configure their browsers to "control the information that google obtains about you"? |
|
Nov 26 |
comment |
Is Google spying on all of us? Your sweeping generalizations and bold assertions are not a substitute for evidence. Using television (a totally passive media) as a metaphor for the active relationships between online search and commerce is laughable. The biggest threat to ordinary people, who have no idea how their information is being used, are supposed professionals like you. I suppose as long as you feel good, the rest of us shouldn't care. |
|
Oct 19 |
comment |
Can someone detect the URL an android app uses? Protect application from being modified may also be of interest. |
|
Oct 19 |
comment |
Why not RSA-encrypt the entire document? Digital signatures are not sufficient for non-repudiation see How to achieve non-repudiation? |
|
Oct 15 |
comment |
What key does Linux use when storing user passwords? "Bruteforce is the only way to crack password hash." No, please see security.stackexchange.com/questions/379/… |
