Reputation
32,037
Next tag badge:
101/100 score
19/20 answers
Badges
5 70 104
Newest
 Good Answer
Impact
~1.1m people reached

1d
comment How bad it is to feed /dev/random with /dev/urandom?
See also Is it worth augmenting /dev/random entropy in software?
Apr
21
comment Google Drive photo security and publicly visible lh*.googleusercontent.com
It's worth noting that the link works for http:// just as well as https://, which weakens the "don't worry it's encrypted" mitigation. Sure, someone would have to modify or re-use the link after removing the 's' - but good security must never depend on users not doing stupid things.
Apr
20
comment Does MAC address filtering provide security?
You ask (title and last line of question) if it provides security. The answer is no. (As such, there is no right configuration).
Apr
17
revised Chrome 50: Where can I see the negotiated cipher suite?
Made it better with a picture :)
Apr
17
comment OS fingerprinting via TCP
Have you read OS Detection from nmap? They wrote the book on it.
Apr
12
comment Boundaries of Personally Identifiable Information - PCI-DSS
@Motivated have updated answer to try and address your comment.
Apr
12
revised Boundaries of Personally Identifiable Information - PCI-DSS
Addressed comment.
Apr
12
answered Boundaries of Personally Identifiable Information - PCI-DSS
Apr
5
comment Preventing deauthentication attacks
@MatthewElvey, about the same thing as if all car drivers ignored stop signs. The network would jam up with talkers talking and their packets crashing against cards that won't listen (the deauth sender is never going to listen to that convo again).
Apr
1
awarded  Good Answer
Apr
1
awarded  Nice Answer
Mar
31
answered Why would a switch be configured to Fail Open?
Mar
31
answered Call recording PCI-DSS issues
Mar
30
comment Is there any benefit to encrypting messages with PGP that will be trasmitted over SSL to a REST server?
See also Is SSL secure enough for a REST API
Mar
29
revised Files related/required to a digital certificate
Expanded OP's "afaik" for keystores.
Mar
16
awarded  Nice Answer
Mar
15
answered Is HTTPS URL in plain text at first connection?
Mar
10
answered Integration with CCAvenue payment gateway
Mar
10
awarded  Nice Answer
Mar
8
awarded  Good Answer