17,432 reputation
976241
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 9 months
seen 22 mins ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Feb
21
comment Help to account all the points of physical access to a rack server to steal software
Are you more worried about private key theft, or intellectual property? What kind of app is this? Why does the business require your code in this hostile location?
Feb
21
comment Help to account all the points of physical access to a rack server to steal software
Curious... Is this actually a "hosting company", a "customer", or another department within a mega-corporation? How does this hoster know so much about your app?
Feb
21
answered C# Image.FromStream is that secure?
Feb
21
comment Should anyone support / implement P3P policies? Do they matter? Are they legally binding?
Related: Google Bypassing User Privacy Settings
Feb
21
awarded  Popular Question
Feb
19
comment Is there a security device to register unauthorised physical access?
10-4. I'll leave this answer since it contains information about HP's inventory checker that may be relevant in other's situations
Feb
19
comment Is there a security device to register unauthorised physical access?
I removed the legal blurb. Does this still help? If not take a look at my comment below your question
Feb
19
revised Is there a security device to register unauthorised physical access?
deleted 344 characters in body
Feb
19
comment Is there a security device to register unauthorised physical access?
So you're not worried about theft, but you are worried about cold boot attacks? Have you taken a complete look at your threat model? If they own the switches you plug into, and are on the same subnet, they can hijack any connection (HTTPS and any SSL based technology included)
Feb
18
answered Is there a security device to register unauthorised physical access?
Feb
16
answered How to securely delete a table in MS-Access?
Feb
16
awarded  Tag Editor
Feb
16
revised tor wiki excerpt
added 286 characters in body
Feb
16
revised tor wiki description
added 1170 characters in body
Feb
16
suggested suggested edit on tor tag wiki excerpt
Feb
16
suggested suggested edit on tor tag wiki
Feb
16
wiki created tor description
Feb
16
wiki created tor excerpt
Feb
16
comment DNS queries with hex string that is a SHA1 of a domain name! Is it a malware?
@robob - That is the only legitimate purpose I can think of. Also it's possible to create a DNS record of *.ebay.com so any random string is permitted.
Feb
15
awarded  Nice Question