17,156 reputation
974235
bio website lamontconsulting.com
location New York, NY
age 37
visits member for 3 years, 8 months
seen 6 mins ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


May
29
comment Is it safe to store password in a session context? ADFS
If you're directly handling credentials (aside from extending the Session Manager) I'd question your approach. Is your session server side or client side?
May
28
asked Does RADIUS allow for eventual, gradual adoption of 2 Factor auth in an AD Environment?
May
20
comment Does having multiple nearly identical copies of an encrypted file make it easier to decrypt?
It depends on the encryption method used. AES-GCM wouldn't be vulnerable. OTP would be.
May
20
awarded  Notable Question
May
18
comment Do heuristics exist for modeling the “harmlessness” of a file?
Sample heuristic: .TXT file containing only ASCII with a proper byte order mark.
May
16
awarded  Notable Question
May
16
comment Why are certificates limited in time?
Would privacy weaknesses in OCSP, and scalability concerns in CRLs also be a reason supporting expiration dates? OT- Do you know of any alternate methods of revocation x509 or not?
May
13
comment What's gonna happen when all IPv4 changes to IPv6?
Because of SPAM, and blacklists required for email to function, SMTP will likely always be dominantly IPv4. Source- private MAAWG meetings.
May
10
awarded  Popular Question
May
9
revised Why do PGP master keys only have a single subkey, and tie certification with signing by default?
strange formatting of >! causes a reveal on hover. Probably isn't what is intended. Edit/undo if needed.
May
6
awarded  Nice Question
Apr
30
comment Am I safe if I run untrusted applications inside a Virtual Machine
This has been answered elsewhere on this site. However, VMWare uses OpenSSL and some versions are vulnerable to the Heartbleed bug. If your VM has network access (or there is any way it can communicate with a vulnerable host), it can borrow data from the host, potentially doing "bad" things with what it learns.
Apr
27
awarded  Nice Question
Apr
24
accepted What Twitter #hashtags apply to IT Security
Apr
23
awarded  Notable Question
Apr
21
revised Is Google Drive security compromised?
edited title
Apr
20
awarded  Popular Question
Apr
18
comment How would I implement “Broadcast Encryption”?
Related crypto.stackexchange.com/q/1247/371
Apr
11
awarded  Popular Question
Apr
11
comment Does HTTPS retrieval, among its other effects, sign a document?
IP address "signing" is of weak utility. If the "ownership" of the IP address comes into question, the whole signing scheme falls apart. Creative, but bad idea