21,108 reputation
19108296
bio website val-id.com
location New York, NY
age 38
visits member for 4 years, 6 months
seen 42 mins ago

The following message is ROT26 encrypted:

Check out my startup at Val-ID, an offline identity company that puts you in control

I'm not looking for a job. I'm going to change the world. The only question is, who wants to do it with me?


Jun
12
revised Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?
added 196 characters in body
Jun
12
comment Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?
@AviD I was surprised that 1.0 seemed supported according to MSFT's website, when in fact it is no longer supported. On the other hand Wikipedia says 1.1 is under Extended Support through July 14 2015, which includes security hotfixes.
Jun
12
asked Should a host based firewall have an API accessible to other applications?
Jun
12
answered Is it a security risk to maintain an application developed for a version of .NET prior to 4.0?
Jun
12
asked How do I sanitize LDAP input and prevent injection attacks? What LDAP injection scenarios are possible?
Jun
12
comment Are services like Hide My Ass and UnoDNS reasonably safe to use?
HTTPS can be hacked in this MITM scenario if the CRL or OCSP response is cached or replayed. That would assume that another trusted CA was hacked. It has happened before, see security.stackexchange.com/a/2273/396
Jun
11
revised Mitigations for Windows clients that don't support OCSP Nonces
Added link to NSS
Jun
11
comment Mitigations for Windows clients that don't support OCSP Nonces
Hello Ryan, welcome to Security.SE. By "our products" do you mean Microsoft?
Jun
11
awarded  Convention
Jun
11
awarded  Announcer
Jun
11
awarded  Announcer
Jun
10
comment What is the most appropriate way to notify/request permission from an ISP related to white-hat security testing?
Never knew that existed!
Jun
10
comment What features do you look for in an Enterprise Log Management solution?
Can you elaborate and tell us why it is a great tool? What features or functionality did you discover?/
Jun
10
revised What features do you look for in an Enterprise Log Management solution?
added 83 characters in body; edited tags; edited title
Jun
9
awarded  Favorite Question
Jun
9
accepted What are the risks of removing ISATAP from the default global block list?
Jun
9
accepted Is the Netscape SMIME extension still required in a certificate?
Jun
9
revised What's the risk of changing permissions of the Security Eventlog registry key to IT operations?
edited title
Jun
9
revised What's the risk of changing permissions of the Security Eventlog registry key to IT operations?
edited title
Jun
8
revised What's the risk of changing permissions of the Security Eventlog registry key to IT operations?
added 254 characters in body; edited title