3,154 reputation
1619
bio website blog.bstpierre.org
location United States
age 38
visits member for 2 years, 10 months
seen Dec 19 '13 at 15:15

Hey


Dec
12
comment Mysql - two-way encryption of sensitive data (email addresses) outside of Apache, PHP and MySQL
a disgruntled ex-employee 5 minutes after getting fired leaving us no time to revoke his access -- your algorithm is wrong: first revoke access, then make the conversion to ex-employee
Dec
12
revised SIEM system, what are the benefits?
fix grammar and spelling
Dec
12
answered WORM media types
Dec
12
suggested suggested edit on SIEM system, what are the benefits?
Dec
10
comment How can I convert my encypted PGP secret key for use performing SSH authentication?
@JeffBurdges: web.monkeysphere.info
Dec
8
comment Can web sites detect whether you are using private browsing mode?
@SonnyOrdell: I think my answer is full of enough disclaimers that it's obvious the short answer is "no". As I mention in my comment/questions on the OP, I think the real answer depends on what the web site operator wants to do with the detection.
Dec
8
answered How dangerous is it that there are DNS entries for our domain that we did not register?
Dec
7
comment How can I keep my identity anonymous as a website owner/administrator?
+1 for the 2nd para: if you're using tor, you can increase the circuit length and use new circuits frequently (MaxCircuitDirtiness). +1 for the suggestion to firewall everything outbound except for the proxy port (this is valid for tor as well as SSH). -1 for the last para -- beware relying on, for example, Blogger.com for anonymity: Google operates in many countries and may be forced by a local government to hand over data (e.g. China).
Dec
7
comment How to guarantee that password is hashed on server-side?
@RoryAlsop: I like the contractual idea -- do you know of anyone putting language like this, say, in their privacy policy or TOU?
Dec
6
comment On-line cryptographically signed date/time?
Is there anything preventing you from operating a service that meets your exact specifications? You're willing to pay, and it seems likely that you could assemble it from freely available components and host it yourself. Linode (for example) runs about $200 a year; depending on your requirements you may be able to use a cheaper host.
Dec
6
comment How can I keep my identity anonymous as a website owner/administrator?
+1 but beware that you should only access your VPS, email, and registrar via HTTPS: TOR exit nodes could snoop your login credentials if you connect via plaintext.
Dec
6
answered Proxy vs. Firewall
Dec
6
answered Listing of DNS vulnerabilities
Dec
6
revised Listing of DNS vulnerabilities
fix grammar
Dec
6
suggested suggested edit on Listing of DNS vulnerabilities
Dec
6
comment Install my own proxy
My past experience has been with openssh on cygwin. But it's been a long time since I've used windows heavily. You might start with this: sshwindows.sourceforge.net -- or post a question (maybe on superuser or serverfault?) about windows ssh servers
Dec
5
comment Install my own proxy
@50ndr33: Windows, linux, Mac, other?
Dec
5
answered Install my own proxy
Dec
5
accepted Filter user input before the database or upon display?
Dec
5
comment Filter user input before the database or upon display?
This is an excellent answer. You managed to read between the lines of my question and covered all of the relevant points. I especially appreciate the "why" -- I knew this intuitively but hadn't formulated in the way you have.