123 reputation
5
bio website timothy.green.name
location
age
visits member for 1 year, 10 months
seen 2 days ago
stats profile views 9

Feb
13
comment Lessons learned and misconceptions regarding encryption and cryptology
H(json_encode(array("builtin", "securely"))) might do it. And @penguat. Realex Payments use a hash of that form in processing credit cards: H(H(various)|secret).
Jan
25
comment Content hashes to help protect resources being fetched from a CDN
Isn't something along these lines already done for flash .swz files? I vaguely recall reading about that one time.
Nov
7
comment Manually adding 's' to 'http'
let us continue this discussion in chat
Nov
7
comment Manually adding 's' to 'http'
@Iszi. Quite. It's not strange. At all. At all at all. I know that. And I'd expect everyone else to know it. So .... I feel I'm not explaining myself well.
Nov
7
comment Manually adding 's' to 'http'
@Iszi. Sorry, perhaps I should have put the word strangely in italics.
Nov
7
comment Manually adding 's' to 'http'
On shared hosting, it seems quite common for a HTTPS request to respond with a certificate made out to snakeoil.dom signed by the Snake Oil CA. Strangely, browsers don't trust this (not least because the domain name doesn't match), but the connection is still encrypted.
Oct
24
comment A safe license System
Some programs "phone home" for license verification, but if they can't reach their home server, they assume that everything's working. So they'll be fine as long as you're offline (or, being nastier, you can edit your hosts file and redirect their home servers to the loopback address).
Feb
15
comment Am I wrong to believe that passwords should never be recoverable (one way hash)?
Report them to Plain Text Offenders.
Oct
25
comment Should I prevent sending of GET requests for urls that are normally operated with POST request?
As in, in PHP, check the $_POST array, not the $_REQUEST array.
Aug
26
comment How can my country's legal/telecoms environment protect against cold-callers conning a remote-access session to the victim's computer?
Happened to my mother here in Ireland. She called me in a panic. I assured her she could safely ignore it.
Aug
11
comment XKCD #936: Short complex password, or long dictionary passphrase?
"Colourless green ideas sleep furiously." Chomsky.