17,462 reputation
976241
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 3 years, 9 months
seen 4 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Mar
4
asked Issuing browser certificates to Chrome and Firefox with Microsoft CA
Mar
4
asked How does “check.torproject.org.” know if you're using TOR?
Mar
4
comment Can I instruct a Telco to prevent 2G connections from our phones?
@DavidSchwartz If they don't have direct control over partners, is information (verified or not) passed along that describes the connection type?
Mar
3
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
I'm simply comparing the security that a Windows 2008R2 server offers against TOR. Windows server offers TLS 1.2 and if Tor is 1.0, that is a valid point of comparison
Mar
3
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
That is great; does TOR use TLS 1.2 and or is it immune to TLS attacks such as BEAST and others?
Mar
3
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Thank you mgjk - So now we are in the same frame of mind... given that a HTTPS connection has so many security issues (documented on this site), how does a TOR based connection compare?
Mar
3
revised What security settings are likely used in Obama's Blackberry?
deleted 12 characters in body
Mar
3
comment A proposal for Data Transmission and Password Encryption
Step 5 confuses me. Whole thing likely vulnerable to MITM. If your goal is security-theater (as you tagged your question)... well it seems like you've achieved that.
Mar
3
asked Can I instruct a Telco to prevent 2G connections from our phones?
Mar
3
answered What security settings are likely used in Obama's Blackberry?
Mar
3
accepted Secure implementations of G2/G3/G4 cellular technology
Mar
3
asked Does KASUMI (A5/3) Related Key attack apply to 3G or other mobile providers?
Mar
2
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Yes, I'm new to TOR, and I'm trying to figure out what type of server application is best suited for hosting a .onion address. It seems that any time a user needs to hide the source IP address, then this may be of benefit.
Mar
2
accepted How do I use DuckDuckGo securely?
Mar
2
comment Reboot to clean state daily, on Windows
Both links work for me on all browsers... perhaps MSFT updated something. (before I was redirected to a MSFT 404 page)
Mar
2
accepted Problems with avoiding JSON hijacking with MVC3's AntiForgeryToken, or similar token validation
Mar
1
comment How do I use DuckDuckGo securely?
If you go to options, there isn't an automatic redirect from the http site to the https site..
Mar
1
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Is there any additional information on how the connection is set up and protected from MITM attacks?
Mar
1
asked How do I use DuckDuckGo securely?
Mar
1
revised Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
added 225 characters in body