18,010 reputation
1385259
bio website lamontconsulting.com
location New York, NY
age 38
visits member for 4 years
seen 22 hours ago

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack


About me


See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk


Nov
22
comment Is it possible to modify the last time a user logged into Windows?
The old event log was numbered sequentially internally so this would be detectable. Does the new event log write events in date time order, or last written?
Nov
21
comment Is it possible to modify the last time a user logged into Windows?
One way - look at the last modified (or acccess) time of the user's local profile
Nov
21
comment Does Wifi encryption create a private tunnel between the adapter and the accesspoint?
@DavidFoerster - Edited to be more clear
Nov
21
comment How much of a risk to students is an open WiFi network on campus? EDIT: please read in full.
Costs: different authentication + encryption costs different amounts. It may or may not require hardware replacements. Support will cost more no doubt. Risks: Anything not encrypted over SSL/HTTPS can potentially be seen. Is this a problem? depends on the content. If your internal sites (Blackboard) don't use SSL, then that is a problem.
Nov
21
comment How much of a risk to students is an open WiFi network on campus? EDIT: please read in full.
@AaronRosenfeld I know first hand that most Universities are willing or eager to discuss their experiences, wants and desires with other schools. Community colleges are different, if they have the staff, depth of technical knowledge, and time, they too will freely share designs that work.
Nov
10
comment How bad is it to truncate a hash?
Is it conceivable that one could build a chart listing "safe, unsafe, and 'easy'" for truncating a hash of various lengths? I'm imagining one chart for preimage, second preimage, and one for collisions. I would be interested if the security increase is relatively the same per characteristic
Nov
8
comment Continued Use of Kerberos
What Authentication protocol is "better" than Kerberos from a technical perspective?
Nov
2
comment Continued Use of Kerberos
For perspective, almost all Windows / Active Directory networks use Kerberos, albeit a MSFT implementation
Oct
23
comment Has a plaintext password ever been used in a court of law as evidence to a crime?
Related Is there any legal reason to save a cleartext password?
Oct
21
comment Which graphic image formats contain revision history? Does the image editing software being used matter?
How to uncover blurred information in photographs
Oct
15
comment Based on these email headers, where is this virus coming from?
Yes, I did anonymise the headers slightly. Those were internal and or known hosts. @Dogeatcatworld
Sep
23
comment Server situated on two physical networks - Bad idea or not
Question for you - If you had an ESX farm, would you allow a DMZ host to be VLANd on the same farm as non DMZ equipment?
Sep
17
comment How are Captive Wifi Portals secured?
@user10008 can't other users logged into the same ssid see , modify or replay data from others
Sep
17
comment How are Captive Wifi Portals secured?
@user10008 perhaps a ssl vpn would do the trick. I just want to authenticate users after they get a secure session
Aug
26
comment Does referrer header checking offer any real world security improvement?
Searching for your question in this site resulted in this answer: security.stackexchange.com/a/7984/396
Aug
16
comment Suspicious 2 page, no image Word Docx has 1.7 MB
Try uploading to VirusTotal...
Aug
16
comment Suspicious 2 page, no image Word Docx has 1.7 MB
I think fonts can be a virus vector...
Aug
14
comment What is the point of secure email gateways?
Whoops yes. BYOD
Aug
13
comment Does where I put my PKI certificates matter?
I've never fully understood the security implications of storing certs in different folders, though there are cases I've seen it matter (XBAP in Trusted Publishers for example)
Aug
13
comment Is there a secure way to create and distribute Shamir Secrets?
That is very cool, I'll be thinking about that for a bit.