17,156 reputation
974235
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 8 months
seen 4 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Feb
13
revised Checklist for configuring WinRM Security settings on servers
added 16 characters in body
Feb
13
revised Checklist for configuring WinRM Security settings on servers
added 9 characters in body; edited title
Feb
12
awarded  Necromancer
Feb
12
comment What Twitter #hashtags apply to IT Security
Related: What security resources should a white hat developer follow these days
Feb
12
asked How can I tell if a DNSSec zone is protected using NSEC3 (versus NSEC)
Feb
12
comment How does DNSSec work? Are there known limitations or issues?
Does NSEC3 prevent the zone walking you describe?
Feb
12
comment How does multi factor authentication modify the AD authentication process?
Does RSA's solution (for example) require something to be installed on the DC's?
Feb
12
revised Checklist for configuring WinRM Security settings on servers
added 428 characters in body
Feb
12
answered Checklist for configuring WinRM Security settings on servers
Feb
12
asked Checklist for configuring WinRM Security settings on servers
Feb
12
asked How does multi factor authentication modify the AD authentication process?
Feb
11
asked What is the security impact of changing PowerShell's PSLanguageMode?
Feb
10
asked What Twitter #hashtags apply to IT Security
Feb
10
revised Should the email server/application be protected by 2 factor authentication? What applications should be protected?
edited title
Feb
10
asked DNS Cache poisioning examples, or other criteria when a client ignores a response
Feb
10
comment Would it make sense to use Bcrypt and PBKDF2 together?
@Dan As far as I know, PCI doesn't specify actual technology, especially Encryption specifications. The legal cases I've seen support what's technically feasible, not technically ideal or perfect. I'm sure either one meets PCI requirements
Feb
10
asked Should the email server/application be protected by 2 factor authentication? What applications should be protected?
Feb
10
asked What regulations *require* multi-factor authentication?
Feb
10
revised How does DNSSec work? Are there known limitations or issues?
added 85 characters in body; edited title
Feb
10
asked How does DNSSec work? Are there known limitations or issues?