Reputation
23,158
Top tag
Next privilege 25,000 Rep.
Access to site analytics
Badges
25 133 350
Impact
~1.7m people reached

Sep
12
awarded  Nice Question
Sep
11
asked Is there a HSTS equivalent for specifying TLS version?
Sep
9
comment Are there any architectures currently out there that use hardware-enforced process isolation? What would it take to add that to x86?
I think DEP with Mandatory Integrity Control does what you ask en.wikipedia.org/wiki/Data_Execution_Prevention
Sep
9
asked What is “half PFS” protection, and what protocols or configurations apply to it?
Sep
9
accepted What are the benefits and risks of various TLS Handshake protocols?
Sep
9
asked What are the benefits and risks of various TLS Handshake protocols?
Sep
9
revised Implemented DMARC, getting reports of canonical.com sending spam - has Ubuntuone been hacked?
edited tags
Sep
9
answered Implemented DMARC, getting reports of canonical.com sending spam - has Ubuntuone been hacked?
Sep
8
comment Are phone apps vulnerable to XSS or CSRF? (Webview, Phonegap, chrometab)
Related: In August 2015, The WhatsApp web application suffered from an injection attack... net-security.org/secworld.php?id=18828
Sep
6
answered Can BlackBerry keep us safe from network providers
Sep
4
awarded  Nice Question
Sep
3
awarded  Booster
Sep
2
awarded  Nice Question
Sep
1
revised How can mobile sign-on be secured from imposter authentication screens?
added 358 characters in body
Sep
1
asked How can mobile sign-on be secured from imposter authentication screens?
Aug
31
comment Are the rules used to validate certificates in the major browsers documented anywhere?
Not to mention if CRLs are used, AIAs if the whole chain is sent, HTS, DANE, OCSP. THEN we get to talk about cipher suites, validation for special features (Same Origin), Channel Based Cookies, version downgrade support, KeyUsages, EKU, support for the Critical keys, validation of intermediate keys (some don't check revoked intermediates). This is a big, but awesome question.
Aug
30
comment How important is split-horizon DNS?
If you're using Windows DNS, it should be pretty easy to use Powershell to iterate through all the records and update them with the contents of the external DNS server (Get-DnsServerResourceRecord)
Aug
30
awarded  Nice Question
Aug
30
comment How important is split-horizon DNS?
Sometimes, there is a technical infrastructure need for this (AD), and the rationale, and extra complexity /hassle is a side effect. Sometimes the initiative for this design isn't security related.
Aug
30
comment Possible for Lync (Skype for Business) to adopt Activesync-style policies?
@schroeder I'm OK with the move - what happens to the bounty (doesn't matter really to me)