1,031 reputation
47
bio website
location
age
visits member for 3 years, 9 months
seen 23 hours ago

23h
awarded  Editor
23h
revised Secure Connection between two mobile (Android and/or iOS) devices
added 229 characters in body
1d
comment Secure Connection between two mobile (Android and/or iOS) devices
That is a well thought out concern. Elliptic Curve Cryptography is often used on mobile devices because of computational limitations.
Apr
21
comment Secure Connection between two mobile (Android and/or iOS) devices
I would agree to not use your own secure channel. But, I would recommend re-implementation for educational purposes, sometimes it can be the best way for the deepest understanding. But, I would certainly recommend against using it in any production capacity.
Apr
21
answered Secure Connection between two mobile (Android and/or iOS) devices
Jul
27
awarded  Yearling
Jul
3
answered Temporarily suspending a Certificate Authority's Certiticate
Jul
3
comment Password database vs flat encrypted file
I agree with schroeder's philosophy. Certainly from an access control perspective, it would be best to have the ability to audit/revoke user access. It is likely worth the time, if this is an available option. I know, realistically, this is not always an available option.
Jul
3
answered Password database vs flat encrypted file
Jul
3
comment Digitally sign all outbound data
I know you are working on a protocol. Can you clean up your question a bit, there are some gaps that are in your head, which you've not communicated ... would make it a lot easier to help you. What do you mean outbound messages? Are you talking about e-mail or are you talking about another serialization scenario. Do you have control of the web site in question? If not, I don't think anyone could say for certain which websites are going to react to extraneous data or not.
Jul
2
answered Storing CVC / CVV / CVV2 until payment is processed
Jan
10
answered Required skills before jumping into vulnerability research
Dec
18
answered How do I securely separate a wireless subnet from the wired network?
Dec
18
awarded  Commentator
Dec
18
comment How do I securely separate a wireless subnet from the wired network?
I don't think most cable modems are full featured enough to do what you're asking. You may want to look at adding a router. This would not be a bad idea regardless of how you end up architecting your network. Everything behind your router would be yours and physically changing ISPs would not alter your "back of house." You could do it with a Layer-3 switch (which is what a router is) but buying a router would be a cheaper solution. Could look at setting up a UTM with a spare PC also; like untangled or endian
Dec
10
answered MiTM attacks SSL to SSL
Sep
6
comment How do I deal with a compromised server?
Yes, if they are making a decision based on some certain risk factors or criteria, I am all for that. I would just hope to emphasis that panicking and hastily unplugging may do more harm than good.
Sep
5
answered Does a rewritten file on NTFS use the same blocks?
Jul
27
awarded  Yearling
Jul
19
answered How do I deal with a compromised server?