6,844 reputation
11339
bio website
location
age
visits member for 2 years, 10 months
seen Feb 4 at 7:22

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Jan
17
reviewed Close Snort alert log simple question
Jan
3
reviewed Close I don't understand how BIPS got hacked
Aug
21
reviewed No Action Needed XSS Penetration Tools for OSX
Aug
21
reviewed Leave Open What are the security implications of the POLi Internet Payments technique?
Aug
21
reviewed Close Starting out in IT security…what are some starting sites/books to learn from
Jun
16
reviewed Leave Open Online POS terminal?
Mar
20
reviewed Close Stop code injections into page code
Mar
14
reviewed Close Create a SSL certificate and sign it with a personal certificate which in turn is signed by a certificate authority
Mar
14
reviewed Leave Open Does the padlock on my browser really indicate a reasonable assurance against eavesdropping?
Mar
14
reviewed Leave Open Where do I securely store application-specific symmetric key?
Mar
4
reviewed Leave Open How to configure iptables for must open ports?
Mar
4
reviewed Close Why doesn't Advanced IP Scanner show machine name?
Mar
4
reviewed Close Choosing an SSL certificate provider
Feb
27
reviewed Close How to predict C rand()?
Feb
27
reviewed Edit Affordable web application attack tools
Feb
27
reviewed Close Possible ways to test security for Windows Phone 7 or iOS devices
Feb
27
reviewed Edit and Reopen Penetration testing job entry exam
Feb
26
reviewed Leave Open Best practices for firewall hardware
Feb
26
reviewed Edit Penetration testing job entry exam
Feb
26
reviewed Leave Open Which are appropiate tests to perform during an internal/LAN security audit?