this.josh

5,941 reputation

11035

bio	website
	location
	age
visits	member for	1 year, 11 months
	seen	May 11 at 5:26
stats	profile views	317

The first rule of security is: you do not invent security protocols.

The second rule of security is: you do not invent security protocols!

The third rule of security is: if this is your first time with security you do not invent security protocols.

Inventing, modifying, tweaking, hacking, extending, optimizing, or just about anything else you can do to a cryptographic protocol, hash, algorithm, PRNG, key agreement, or cryptographic technique is a very bad idea.

(Not dead.)

	5,941 reputation	bio	website		visits	member for	1 year, 11 months
11035 badges		location			seen	May 11 at 5:26

summary answers questions tags badges favorites bounties reputation activity

133 Revisions

suggestions reviews revisions comments badges posts accepts all

Mar 19	revised	Safest way for multiple users post to a single social networking account added tags
Mar 19	revised	threats wiki excerpt added 92 characters in body
Feb 27	revised	Affordable web application attack tools Clarification and details
Feb 27	revised	Penetration testing job entry exam deleted 74 characters in body
Feb 26	revised	Penetration testing job entry exam deleted 1649 characters in body; edited tags; edited title
Jan 22	revised	Penetration testing against an ignorant target - Is it legal? deleted 54 characters in body
Dec 4	revised	Would publishing a network diagram make the network less secure? clarification and grammar
Dec 1	revised	How effectively can ISPs detect illegal file sharing? added 8 characters in body; edited tags
Nov 26	revised	Is Google spying on all of us? added 16 characters in body
Oct 19	revised	Is there any security value of creatively naming folders containing sensitive files? added tags obscurity and confidentiality
Oct 19	revised	Can someone detect the URL an android app uses? added tag trusted-computing
Oct 16	revised	How to know if its the same User? added tag identity
Jan 31	revised	Is indirect access to a computer as bad as direct? changed client to server, noted that breaching intranet may be bad
Nov 26	revised	What is the practical difference between MAC and Capabilities added 1755 characters in body
Nov 18	revised	Ethics and economy in security research Now for a question
Nov 9	revised	Bell-LaPadula imlementation example added 84 characters in body
Nov 3	revised	Is it safe to store and replay user-provided mime types? added tags
Nov 3	revised	Where's the security when a payment gateway let website handle Credit Card detail added suitable tags
Nov 1	revised	Which graphic image formats contain revision history? Does the image editing software being used matter? added suggestion to use PNG and check with a string scanner
Oct 21	revised	Why would configuring a Blackberry to turn radio off when charging help with security? added tags