21,601 reputation
20118305
bio website val-id.com
location New York, NY
age 38
visits member for 4 years, 8 months
seen 9 hours ago

The following message is ROT26 encrypted:

Check out my startup at Val-ID, an offline identity company that puts you in control

I'm not looking for a job. I'm going to change the world. The only question is, who wants to do it with me?


May
22
answered How much can I trust the “factory restore/reset” on a(n) (potentially compromised) android?
May
21
comment Choose your own exponents in RSA?
See Impacts of not using exponent of 65537 on crypto
May
21
awarded  Notable Question
May
21
comment Why did Facebook not use HSTS for a long time after it became available?
note to mod - someone voted to close, but I think your answers and links are interesting and can be applied to many other sites. Might be a topic for META but can't post now.
May
21
comment Do we need to logout of webapps?
Does this advice still apply to pressing the back button/history to re-authenicate to a SAML/federated cookie? Would be interesting to see the scenarios that affect the various caching directives... it's probably documented in Google's (old?) Browser Security Handbook
May
21
comment Why do you need to close your browser window after logging out of a website?
Since not every browser acts the same, and plugins and local security software (or proxies) may alter this behavior, I think the advice is a good way to ensure a consistent security posture. Here is an example of why this is needed, because some apps/proxies may cause prior session/SAML auth to be cached. Some SAML providers (facebook, and older ADFS in non cluster mode) are affected security.stackexchange.com/q/8404/396
May
20
comment Should security documentation referencing “state sponsored exploits” be revised to include large corporations also?
That fits what I'm looking for: organized crime. Thanks
May
20
revised What reputable site should I download Putty from?
added 133 characters in body
May
20
comment Should security documentation referencing “state sponsored exploits” be revised to include large corporations also?
True, but this is security related documentation...
May
20
comment Should security documentation referencing “state sponsored exploits” be revised to include large corporations also?
I wouldn't doubt that in some countries, a corporation can influence a state to act as a proxy. They already place the individuals they want in power by funding their campaigns
May
20
awarded  Popular Question
May
20
asked Should security documentation referencing “state sponsored exploits” be revised to include large corporations also?
May
19
revised How can I explain “zero knowledge proof” to an end user?
added 11 characters in body
May
17
answered Creating my own CA for an intranet
May
16
revised What web browsers support ECC vs DSA vs RSA for SSL/TLS?
added 72 characters in body
May
16
revised What web browsers support ECC vs DSA vs RSA for SSL/TLS?
added 15 characters in body
May
16
revised What web browsers support ECC vs DSA vs RSA for SSL/TLS?
added 15 characters in body
May
16
asked What web browsers support ECC vs DSA vs RSA for SSL/TLS?
May
16
revised What can I do as a user to minimize the risk of online banking?
deleted 140 characters in body
May
16
comment Is there any security reason that mail services like gmail or yahoomail limit the size of file attachment?
@ali one file can be bifurcated into many if the SMTP envelope RFC2821 / includes many different SMTP domains. If those domains allow both a two hop NDR AND a full text inclusion of the large attachment, one 1MB file sent to 1,000 people can be expanded into 1 GB outbound, then back inbound with the two hop NDR.. turning 1 MB into 2 GB