makerofthings7

less info

6,518 reputation

1349

bio	website	lamontconsulting.com
	location	New York, NY
	age	35
visits	member for	1 year, 6 months
	seen	8 hours ago
stats	profile views	267

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

DANE for DNS: Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack

About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

	6,518 reputation	bio	website	lamontconsulting.com	visits	member for	1 year, 6 months
1349 badges		location	New York, NY		seen	8 hours ago

summary answers questions tags badges favorites bounties reputation activity

206 Questions

votes activity newest

51	How to write an email regarding IT Security that will be read, and not ignored by the end user?
35	What security resources should a white-hat developer follow these days?
33	Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
30	Lessons learned and misconceptions regarding encryption and cryptology
16	Is there any legal reason to save a cleartext password?

6,518 Reputation

+10	Same User, Different Access Points, different passwords?
+5	Lessons learned and misconceptions regarding encryption and cryptology
+5	What is the security impact of changing PowerShell's PSLanguageMode?
+5	Are COMET installations immune to “Slow TCP Reading” DoS on Windows? (Such as SignalR or WebSync)

87 Answers

votes activity newest

10	Are there security issues with embedding an HTTPS iframe on an HTTP page?
8	Is PBKDF2-based System.Cryptology.RFC2898DeriveBytes() “better” for Unicode Password hashing than traditional methods?
7	Does an established ssl connection mean a line is really secure
6	How does using OpenID affect webapp security?
6	What type of content better not to transfer by email?

185 Tags

39 appsec × 56	19 research × 8
38 web-application × 43	15 mobile × 30
28 ssl × 45	15 passwords × 14
20 cryptography × 41	13 windows × 25
20 authentication × 28	11 web-browser × 27