7,143 reputation
11441
bio website
location
age
visits member for 3 years, 4 months
seen 42 mins ago

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)


Jul
16
revised How do websites tracker cookies and beacon work?
clarified title
Jun
18
revised FOUO on hosted sharepoint
added 189 characters in body
Mar
19
revised Safest way for multiple users post to a single social networking account
added tags
Mar
19
revised threats wiki excerpt
added 92 characters in body
Feb
27
revised Affordable web application attack tools
Clarification and details
Feb
27
revised Penetration testing job entry exam
deleted 74 characters in body
Feb
26
revised Penetration testing job entry exam
deleted 1649 characters in body; edited tags; edited title
Jan
22
revised Penetration testing against an ignorant target - Is it legal?
deleted 54 characters in body
Dec
4
revised Would publishing a network diagram make the network less secure?
clarification and grammar
Dec
1
revised How effectively can ISPs detect illegal file sharing?
added 8 characters in body; edited tags
Nov
26
revised Is Google spying on all of us?
added 16 characters in body
Oct
19
revised Is there any security value of creatively naming folders containing sensitive files?
added tags obscurity and confidentiality
Oct
19
revised Can someone detect the URL an android app uses?
added tag trusted-computing
Oct
16
revised How to know if its the same User?
added tag identity
Jan
31
revised Is indirect access to a computer as bad as direct?
changed client to server, noted that breaching intranet may be bad
Nov
26
revised What is the practical difference between MAC and Capabilities
added 1755 characters in body
Nov
18
revised Ethics and economy in security research
Now for a question
Nov
9
revised Bell-LaPadula imlementation example
added 84 characters in body
Nov
3
revised Is it safe to store and replay user-provided mime types?
added tags
Nov
3
revised Where's the security when a payment gateway let website handle Credit Card detail
added suitable tags