19,092 reputation
1591266
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 4 years, 1 month
seen 32 mins ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Dec
4
answered Would it be good secure programming practice to overwrite a “sensitive” variable before deleting it?
Dec
4
awarded  Notable Question
Dec
3
comment What prevents “money card” (offline smartcard system) from getting duplicated for payment fraud?
Posting this to validate the question as worthy to be asked: Some stored value cards actually store the value on the card itself. Here is an example where the protocol (to deduct the value) is insecure, and the "deduct payment" instruction is hidden youtube.com/watch?v=vZ4MqMUO5NY
Dec
3
answered Subordinate Certification Authorities and managed certificates
Dec
2
revised Client side password hashing
added 101 characters in body
Dec
1
awarded  Notable Question
Dec
1
awarded  Nice Answer
Nov
29
answered Techniques to make a login page safe without using SSL
Nov
28
awarded  Notable Question
Nov
26
awarded  Popular Question
Nov
24
awarded  Famous Question
Nov
22
comment Is it possible to modify the last time a user logged into Windows?
The old event log was numbered sequentially internally so this would be detectable. Does the new event log write events in date time order, or last written?
Nov
21
comment Is it possible to modify the last time a user logged into Windows?
One way - look at the last modified (or acccess) time of the user's local profile
Nov
21
comment Does Wifi encryption create a private tunnel between the adapter and the accesspoint?
@DavidFoerster - Edited to be more clear
Nov
21
revised Does Wifi encryption create a private tunnel between the adapter and the accesspoint?
deleted 11 characters in body
Nov
21
comment How much of a risk to students is an open WiFi network on campus? EDIT: please read in full.
Costs: different authentication + encryption costs different amounts. It may or may not require hardware replacements. Support will cost more no doubt. Risks: Anything not encrypted over SSL/HTTPS can potentially be seen. Is this a problem? depends on the content. If your internal sites (Blackboard) don't use SSL, then that is a problem.
Nov
21
comment How much of a risk to students is an open WiFi network on campus? EDIT: please read in full.
@AaronRosenfeld I know first hand that most Universities are willing or eager to discuss their experiences, wants and desires with other schools. Community colleges are different, if they have the staff, depth of technical knowledge, and time, they too will freely share designs that work.
Nov
21
revised How much of a risk to students is an open WiFi network on campus? EDIT: please read in full.
added 692 characters in body
Nov
21
asked Does Wifi encryption create a private tunnel between the adapter and the accesspoint?
Nov
21
answered How much of a risk to students is an open WiFi network on campus? EDIT: please read in full.