7,082 reputation
11440
bio website
location
age
visits member for 3 years, 2 months
seen Aug 20 at 20:58

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Jul
16
reviewed Leave Open What is the point of hosting database externally?
Jul
15
reviewed Approve suggested edit on Should I add protections where I dont understand how hacker can break system?
Jun
28
reviewed Approve suggested edit on air-gap tag wiki excerpt
Jun
28
reviewed Approve suggested edit on air-gap tag wiki
Jun
1
reviewed Close What's the need of multiple implementations of SSL/TLS?
Jun
1
reviewed Close How does the TCP/IP lack security?
May
31
reviewed Leave Open Way to make “DNS unblockers” safe?
May
31
reviewed Approve suggested edit on If a Windows laptop with an encrypted hard disk is stolen, can the contents be accessed by a professional hacker?
Jan
17
reviewed Close Snort alert log simple question
Jan
3
reviewed Close I don't understand how BIPS got hacked
Aug
21
reviewed No Action Needed XSS Penetration Tools for OSX
Aug
21
reviewed Leave Open What are the security implications of the POLi Internet Payments technique?
Jun
16
reviewed Leave Open Online POS terminal?
Mar
20
reviewed Close Stop code injections into page code
Mar
14
reviewed Close Create a SSL certificate and sign it with a personal certificate which in turn is signed by a certificate authority
Mar
14
reviewed Leave Open Does the padlock on my browser really indicate a reasonable assurance against eavesdropping?
Mar
14
reviewed Leave Open Where do I securely store application-specific symmetric key?
Mar
4
reviewed Leave Open How to configure iptables for must open ports?
Mar
4
reviewed Close Why doesn't Advanced IP Scanner show machine name?
Mar
4
reviewed Close Choosing an SSL certificate provider