makerofthings7

less info

network profile

12,643 reputation

331137

bio	website	lamontconsulting.com
	location	New York, NY
	age	36
visits	member for	2 years, 6 months
	seen	3 hours ago
stats	profile views	641

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack

About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk

summary answers questions tags badges favorites bounties reputation activity

342 Questions

views newest activity votes

69

70

votes

21

answers

16

kviews

Lessons learned and misconceptions regarding encryption and cryptology

cryptography encryption .net java

2d ago makerofthings7 12.6k

1

5

votes

1

answer

15

kviews

How do I clear cached credentials from my Windows Profile?

authentication windows certificates

jun 2 '12 at 15:41 makerofthings7 12.6k

1

12

votes

3

answers

9

kviews

How to test for the BEAST attack if server isn't Internet-connected?

ssl beast

oct 4 at 23:01 Thomas Pornin 82.9k

12

51

votes

8

answers

6

kviews

Why would someone trust DuckDuckGo or other providers with a similar privacy policy?

privacy trust

sep 15 at 20:27 sfx 628

6

11

votes

4

answers

6

kviews

What ciphers should I use in my web server after I configure my SSL certificate?

cryptography encryption ssl webserver certificates

feb 21 at 18:49 makerofthings7 12.6k

4

10

votes

6

answers

5

kviews

Is PBKDF2-based System.Cryptology.RFC2898DeriveBytes() “better” for Unicode Password hashing than traditional methods?

cryptography passwords hash .net

apr 17 '12 at 18:37 D.W. 44.9k

5

votes

6

answers

4

kviews

Blocking insecure iPhones from accessing ActiveSync

corporate-policy mobile end-points

feb 11 at 3:47 Satish Shetty 21

9

8

votes

2

answers

3

kviews

Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

encryption windows certificates public-key-infrastructure certificate-authority

jan 5 at 14:54 makerofthings7 12.6k

3

7

votes

3

answers

3

kviews

Does ASP.NET Viewstate implicitly prevent CSRF attacks? What does this mean for MVC?

asp.net csrf asp.net-mvc

feb 23 at 17:29 Nauman 11

2

18

votes

3

answers

3

kviews

How does “check.torproject.org.” know if you're using TOR?

php anonymity tor

may 15 at 18:20 0x90 294

5

votes

3

answers

3

kviews

What SSL key should I make for IIS: RSA or DH? What bit length is appropriate?

web-application cryptography ssl mobile certificates

mar 16 '11 at 9:55 AviD♦ 20.4k

7

10

votes

7

answers

3

kviews

What are the realistic, and most secure crypto for Symmetric, Asymmetric, Hash, Message Authentication Code ciphers?

cryptography encryption mobile hash .net

may 3 '12 at 10:13 akira 692

15

56

votes

15

answers

3

kviews

How to write an email regarding IT Security that will be read, and not ignored by the end user?

corporate-policy antivirus business-risk patching

mar 27 '12 at 20:36 Brad 579

69

48

votes

18

answers

3

kviews

What security resources should a white-hat developer follow these days?

appsec attacks source-code professional-education

nov 27 at 10:14 Community♦ 1

1

11

votes

2

answers

2

kviews

How does RSA encryption compare to PGP?

cryptography public-key-infrastructure pgp

sep 11 at 12:05 Tobias Kienzler 704

1

10

votes

3

answers

2

kviews

Should anyone support / implement P3P policies? Do they matter? Are they legally binding?

legal privacy cookies p3p

dec 2 '11 at 10:13 D.W. 44.9k

4

votes

1

answer

2

kviews

What is updated with “Update Root Certificates” enabled? What is the equivalent in Windows 2008R2?

windows certificates public-key-infrastructure certificate-authority

mar 30 at 3:54 makerofthings7 12.6k

8

13

votes

5

answers

2

kviews

Preventing information disclosure from browser back button/history?

appsec web-application web-browser javascript data-leakage

nov 22 '11 at 11:19 Z_TLAW 46

2

6

votes

1

answer

2

kviews

How can I enumerate all the saved RSA keys in the Microsoft CSP?

appsec cryptography source-code windows key-management

jun 2 '12 at 15:44 makerofthings7 12.6k

6

12

votes

4

answers

2

kviews

Does TOR Hidden Service Protocol provide more threat protection than a standard HTTPS session?

ssl dns dnssec tor man-in-the-middle

jun 17 '12 at 22:52 curiousguy 1,721

4

votes

5

answers

2

kviews

Preferred UAC configuration in Enterprises that use Login scripts to map drives

network windows active-directory scripting uac

jan 22 at 15:11 Ron 1

1

6

votes

2

answers

2

kviews

How easy/difficult is it to spoof DNS? Are some scenarios safer/more risky than others?

ip-spoofing risk-management threat-modeling dns-spoofing

sep 4 '11 at 23:39 D.W. 44.9k

2

3

votes

2

answers

2

kviews

Chrome SSL Warning: “You cannot proceed because the website operator has requested heightened security for this domain. ”

ssl certificates wildcard

may 8 at 2:10 user25683 1

4

19

votes

11

answers

2

kviews

How feasible is it for a CA to be hacked? Which default trusted root certificates should I remove?

ssl certificates public-key-infrastructure certificate-authority trust

aug 9 at 11:36 makerofthings7 12.6k

4

votes

4

answers

2

kviews

Benefits of identifying clients based upon the “X-Forwarded-For” or similar HTTP header in addition to Client IP

web-application ssl web-browser webserver http

nov 9 '11 at 17:51 symcbean 4,752

2

8

votes

2

answers

2

kviews

What are the differences between the versions of TLS?

cryptography ssl

jul 13 '11 at 11:30 Bruno 4,186

1

6

votes

4

answers

2

kviews

How effective is iPhone 3GS and 4 encryption?

encryption mobile disk-encryption ios iphone

oct 5 at 22:40 Andrey Botalov 1,132

6

votes

2

answers

2

kviews

Private Tor networks: what are the benefits, and how would it be accomplished?

network anonymity

nov 25 '11 at 20:42 Jeff Burdges 595

2

3

votes

1

answer

2

kviews

How do I use C# to encrypt/decrypt data where the private key is on a smartcard, hardware security module, TPM chip etc

appsec cryptography key-management .net smartcard

jan 20 '11 at 0:50 AviD♦ 20.4k

2

11

votes

3

answers

1

kviews

How can I prevent tracking by ETAGs?

web-browser privacy http cookies

may 8 at 20:46 Community♦ 1

Technology			Life / Arts	Culture / Recreation	Science	Other
Stack Overflow Server Fault Super User Web Applications Ask Ubuntu Webmasters Game Development TeX - LaTeX	Programmers Unix & Linux Ask Different (Apple) WordPress Answers Geographic Information Systems Electrical Engineering Android Enthusiasts IT Security	Database Administrators Drupal Answers SharePoint User Experience Mathematica more (14)	Photography Science Fiction & Fantasy Seasoned Advice (cooking) Home Improvement more (13)	English Language & Usage Skeptics Mi Yodeya (Judaism) Travel Arqade (gaming) Bicycles Role-playing Games more (22)	Mathematics Cross Validated (stats) Theoretical Computer Science Physics more (7)	Stack Apps Meta Stack Overflow Area 51 Stack Overflow Careers

site design / logo © 2013 stack exchange inc; user contributions licensed under cc-wiki with attribution required

rev 2013.5.24.702