18,005 reputation
1285259
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 4 years
seen 2 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Mar
3
comment A proposal for Data Transmission and Password Encryption
Step 5 confuses me. Whole thing likely vulnerable to MITM. If your goal is security-theater (as you tagged your question)... well it seems like you've achieved that.
Mar
3
asked Can I instruct a Telco to prevent 2G connections from our phones?
Mar
3
answered What security settings are likely used in Obama's Blackberry?
Mar
3
accepted Secure implementations of G2/G3/G4 cellular technology
Mar
3
asked Does KASUMI (A5/3) Related Key attack apply to 3G or other mobile providers?
Mar
2
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Yes, I'm new to TOR, and I'm trying to figure out what type of server application is best suited for hosting a .onion address. It seems that any time a user needs to hide the source IP address, then this may be of benefit.
Mar
2
accepted How do I use DuckDuckGo securely?
Mar
2
comment Reboot to clean state daily, on Windows
Both links work for me on all browsers... perhaps MSFT updated something. (before I was redirected to a MSFT 404 page)
Mar
2
accepted Problems with avoiding JSON hijacking with MVC3's AntiForgeryToken, or similar token validation
Mar
1
comment How do I use DuckDuckGo securely?
If you go to options, there isn't an automatic redirect from the http site to the https site..
Mar
1
comment Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
Is there any additional information on how the connection is set up and protected from MITM attacks?
Mar
1
asked How do I use DuckDuckGo securely?
Mar
1
revised Does Tor Hidden Service Protocol provide more threat protection than a standard HTTPS session?
added 225 characters in body
Mar
1
awarded  Promoter
Mar
1
comment Reboot to clean state daily, on Windows
Bad link for the Windows7 technologies document
Mar
1
answered Reboot to clean state daily, on Windows
Feb
29
awarded  Announcer
Feb
28
answered Is there a security device to register unauthorised physical access?
Feb
23
comment Confusing about Ephemeral Diffie-Hellman
Surprised this question came here, and not Cryptography. I've seen IT.Sec questions about crypto "Athentication" be confused with completely different types of auth
Feb
23
comment List of unpatchable exploits in MS Exchange 2003
Correction: Exchange 2003 ends mainstram support 4/14/09, and Extended Support for SP3 ends 4/8/14 See this link: support.microsoft.com/lifecycle/?p1=1773