Reputation
41,093
Next tag badge:
159/100 score
19/20 answers
Badges
14 94 163
Newest
 Nice Answer
Impact
~1.5m people reached

Jun
5
comment Is it illegal to read an e-mail that was accidentally sent to you?
did you receive permission from out-law.com to copy this text? According to out-law.com/page-292, freely copying a single paragraph is permitted, but more than that requires permission. Dont wanna mess with 'em, they be lawyers!
Jun
5
comment Security implications of storing the password hash along an encrypted AES key
@Normand, just to emphasize, the AES key is encrypted with the password, which is never stored, and not with the stored hash, correct?
Jun
5
revised Security implications of storing the password hash along an encrypted AES key
edited tags
Jun
5
revised Secure mount options + partitioning on Ubuntu
edited tags
Jun
5
revised Recommend Keylogger for Ubuntu?
edited tags
Jun
5
revised IPTables default security rules for a gateway/router?
changed "defacto" to "default" - if this is not what was meant, please revert
Jun
5
comment Where to download OpenBSD release ISO's over HTTPS?
small nitpick - the SHA256 takes care of integrity, not authentication (a file isnt who anything... its a what). The GPG signing takes care of authenticity, that the hash is the correct hash (i.e. created by the correct entity).
Jun
5
revised Where to download OpenBSD release ISO's over HTTPS?
edited tags
Jun
5
revised Shouldn't GPG key fetching use a secure connection?
edited tags
Jun
5
comment What might be the legal and policy consequences of traffic sniffing?
If it was me, he wouldn't be disciplined, he'd be rewarded.
Jun
5
comment What might be the legal and policy consequences of traffic sniffing?
@bob, there are companies that would still try to press charges against you, even if you did this from home. They would have no legal or ethical ground to stand on, but they'd still try....
Jun
5
revised What might be the legal and policy consequences of traffic sniffing?
edited tags
Jun
5
revised Any useful tools for Android source code review?
edited tags
Jun
5
revised Secure Linux Desktop
edited tags
Jun
5
answered Resources for physical security questions
Jun
5
comment Can I reclaim ex employee gmail account?
@Jake, note that you need to talk to a lawyer with experience on this topic (e.g. there are many who focus on internet law), as this will probably be quite niche, and most lawyers would not be familiar with this.
Jun
5
revised Can I reclaim ex employee gmail account?
edited tags
Jun
5
comment Secure Development costs
Great question, I actually did some work around that a few years ago for a relatively large-ish multi-national dev shop - unfortunately, I don't have any of those nmbers anymore :(. Bottom line, as expected, it was not cheap, and only saved money in the long run because they were currently paying so much on the pentest-fix-retest-refix cycle....
Jun
5
revised Secure Development costs
edited tags
Jun
5
revised Question of importance of FIPS in security implementations
edited tags