16,573 reputation
861215
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 5 months
seen 2 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Nov
26
accepted How do I use Windows 7 virtualization features to prevent transitive trust of admin credentials?
Nov
26
accepted Which graphic image formats contain revision history? Does the image editing software being used matter?
Nov
26
comment Which graphic image formats contain revision history? Does the image editing software being used matter?
Related: What's in a GIF Bit by Byte
Nov
20
comment Ethics and economy in security research
@nealmcb ;) Thanks
Nov
20
awarded  Yearling
Nov
18
comment REST specific security weaknesses
Very informative!
Nov
18
accepted What is more secure: ISDN, Cable Modem, DSL, T1, etc…?
Nov
17
revised What is more secure: ISDN, Cable Modem, DSL, T1, etc…?
added 78 characters in body
Nov
17
asked What is more secure: ISDN, Cable Modem, DSL, T1, etc…?
Nov
17
comment Ethics and economy in security research
@Iszi - Thanks, still getting used to a new ergonomic keyboard
Nov
17
answered Ethics and economy in security research
Nov
17
comment Identifying and preventing execution of “any” function via Late-Bound commands
Any advice regarding externally developed code? Could be open source, or closed?
Nov
17
revised Identifying and preventing execution of “any” function via Late-Bound commands
edited tags
Nov
16
asked Identifying and preventing execution of “any” function via Late-Bound commands
Nov
15
awarded  Nice Question
Nov
14
accepted Should CSRF 'Double Submit Cookie' technique have a different seed value for the cookie versus the HTTP POST?
Nov
14
accepted OpenID Session Fixation with CSRF
Nov
12
comment Does the practice of blocking an off-site “Referer:” HTTP requests improve website security?
@KrzysztofKotowicz I have another question that would also benefit from your "lose-referer" script. I'll +1 if you post security.stackexchange.com/q/8500/396
Nov
10
awarded  Nice Question
Nov
9
comment OpenID Session Fixation with CSRF
@curiousguy Wow! I just fixed that horrible typo. Thanks for the catch