Reputation
30,182
Next tag badge:
101/100 score
19/20 answers
Badges
5 67 99
Newest
 Good Answer
Impact
~990k people reached

14h
revised Why did Poitras and Greenwald put their batteries in the fridge?
added 241 characters in body
14h
comment Why did Poitras and Greenwald put their batteries in the fridge?
@RBerteig I think the Microwave, which is exactly a Faraday cage, is the least suspicious way... but even my microwave isn't tight enough to block cell phone signals.
15h
awarded  Good Answer
18h
reviewed Approve Why did Poitras and Greenwald put their batteries in the fridge?
19h
awarded  Nice Answer
20h
comment Why did Poitras and Greenwald put their batteries in the fridge?
@NeilSmithline, the article postulates that Snowden's fridge could act as a Faraday cage. But for a cell phone you need the cage to mesh around 1/4" - and on any fridge I've ever used, the rubber seal around the door easily exceeds that. Also there are holes in the metal for the vent ducting... I'm really not optimistic about the reality of the average fridge blocking cell signals.
21h
revised Why did Poitras and Greenwald put their batteries in the fridge?
added 465 characters in body
22h
comment Why did Poitras and Greenwald put their batteries in the fridge?
@RoraZ from that quote there, it's ambiguous whether "put them" refers to the batteries or the cell phones. It could mean the batteries, the cell phones, or the pile of batteries and (disconnected) cell phones. I strongly suspect the cell phones ended up in the fridge.
22h
answered Why did Poitras and Greenwald put their batteries in the fridge?
1d
comment Should my company change the internal Root CA hash method from SHA-1 to SHA-2?
@JyodeLys you are correct, simply re-signing the root cert and re-distributing it will allow it to continue to be used. Because it isn't necessary to make this an immediate change, and because the complexity of re-signing rather than migrating to a new one can be more confusing, I chose to list the other method. But I think either one would work just fine.
2d
revised Should my company change the internal Root CA hash method from SHA-1 to SHA-2?
added 5 characters in body
2d
answered Should my company change the internal Root CA hash method from SHA-1 to SHA-2?
2d
comment Why do people post questions on here they can easily google an answer for?
Boy, if there was ever a question to make me feel righteous about my arrogance, this is it.
2d
revised What steps do Gmail, Yahoo! Mail, and Hotmail take to prevent eavesdropping on email?
Added addendum upon requiring TLS (blanket and policy based)
2d
comment What steps do Gmail, Yahoo! Mail, and Hotmail take to prevent eavesdropping on email?
@SlashNetwork yes, that is possible, but violates RFC 2487 for publicly-available mail servers. I'll add a note about this to the answer because I think it's interesting :)
Feb
2
reviewed Close Samsung Knox Security Posture
Feb
2
comment How to update a non clientUpdateProhibited domain name?
For your homework, assess the weaknesses of this process: Register.com Email Address Change Form
Feb
2
comment How to update a non clientUpdateProhibited domain name?
then the answer is "social engineering and alternate channels" (which is what I said, but with less flippancy). Unfortunately, I can't make it descriptive, so it's a comment not an answer.
Feb
2
comment How to update a non clientUpdateProhibited domain name?
Historically? Fax. This is modern day, though, so I've no doubt people are doing it via tumblr or flickr or something else with no e.
Feb
1
comment Identifying cipher mode in TLS
@Purefan, I chose not to because it doesn't answer the question ("How do I identify the cipher mode?") but I put it as a comment because it might help the poor guy out in the short term :)