makerofthings7

less info

network profile

12,519 reputation

331136

bio	website	lamontconsulting.com
	location	New York, NY
	age	36
visits	member for	2 years, 6 months
	seen	1 hour ago
stats	profile views	639

The following message is ROT26 encrypted:

SSL isn't good enough. Your website can be hacked.
Help solve the problem by advocating these RFCs:

TLSA (formerly DANE for DNS) Fixes the hackable CA problem

TLS-OBC: Fixes TLS, and the Related Domain Cookie Attack

About me
I have no relation to the above sites; I am just an advocate

Why "makerofthings7"? It's a challenge to "make seven things in my life of significant quality and value". Who knows if those things will take the form of software, art, or people. (I'm not married, no kids yet)

See ...my LinkedIn profile

Bitcoin: 1Ev4VoQYqZzJa1YvDCyUxFjpFhtK34evHk

summary answers questions tags badges favorites 1 bounties reputation activity

338 Questions

views newest activity votes

10

votes

6

answers

305

views

Should we configure all devices to never request SSL 2.0, and reject it if offered?

cryptography network ssl attack-prevention proxy

oct 7 '11 at 12:46 makerofthings7 12.5k

1

10

votes

3

answers

324

views

What security requirements do you have for Domain Administrators?

operating-systems windows privileged-account

jan 13 '11 at 16:33 Scott Pack 7,981

9

votes

2

answers

366

views

How does the Copyright Alert System work? Who has implemented it?

network privacy legal p2p torrent

may 2 at 17:48 Ali Ahmad 1,383

8

votes

2

answers

198

views

Do any DNS registrars support multi factor authentication?

network dns multi-factor

may 8 at 7:16 arikb 11

8

votes

2

answers

524

views

Protecting cellphones from USB attacks (a.k.a. Juice Jacking)

mobile exploit hardware corporate-policy phone

mar 14 at 13:58 makerofthings7 12.5k

9

8

votes

2

answers

3

kviews

Checklist on building an Offline Root & Intermediate Certificate Authority (CA)

encryption windows certificates public-key-infrastructure certificate-authority

jan 5 at 14:54 makerofthings7 12.5k

8

votes

5

answers

205

views

Is it a risk to highlight text while reading a webpage?

web-browser javascript

aug 31 at 21:36 rox0r 3,502

2

8

votes

4

answers

345

views

Does OpenID, SAML pose a threat to Tor's anonymity? How can I protect from a compromised .exit node?

appsec authentication cloud-computing anonymity saml

nov 25 '11 at 21:03 Jeff Burdges 585

1

8

votes

1

answer

153

views

What practical uses are there for the AD feature of “Confidential Attributes”

appsec access-control confidentiality active-directory ldap

oct 19 '11 at 13:07 zedman9991 1,835

2

8

votes

9

answers

340

views

What is the proper way to view the sourcecode of a website?

appsec web-application web-browser http

oct 6 '11 at 8:43 Michał Šrajer 366

8

votes

2

answers

473

views

Benefits and drawbacks of giving an Administrator two accounts for elevated rights and another for daily use, such as email

authentication passwords password-management identity privileged-account

sep 23 '11 at 10:35 Rory Alsop♦ 32.4k

2

8

votes

2

answers

2

kviews

What are the differences between the versions of TLS?

cryptography ssl

jul 13 '11 at 11:30 Bruno 4,156

5

7

votes

3

answers

720

views

What does a court need to successfully prosecute a hacker? Please cite previous cases if possible

incident-response legal forensics black-hat integrity

apr 19 at 23:12 Community♦ 1

7

votes

4

answers

188

views

When changing a password using a WebPage, must the old password be entered on the same screen?

web-application passwords password-management

apr 2 at 1:15 Mark 1

3

7

votes

4

answers

1

kviews

What Partial Homomorphic Encryption implementations exist and how do I leverage them?

encryption cryptography cloud-computing .net homomorphic-encryption

mar 22 at 13:16 curious 126

7

votes

3

answers

225

views

Is it safer to compile open source code vs simply running the binary?

rootkits opensource binary-code

mar 20 at 11:00 Thomas Pornin 82.3k

4

7

votes

5

answers

488

views

What security requirements are a defacto standard in the Financial Industry?

compliance legal

mar 9 at 4:30 Eric G 3,016

3

7

votes

3

answers

259

views

Is it inconsistent to tell users to “not click on password links in email”, and requiring clicks on “forgot password” links?

passwords authentication web-browser email password-policy

mar 3 at 18:30 Eric G 3,016

3

7

votes

3

answers

3

kviews

Does ASP.NET Viewstate implicitly prevent CSRF attacks? What does this mean for MVC?

asp.net csrf asp.net-mvc

feb 23 at 17:29 Nauman 11

7

votes

2

answers

236

views

What is the risk and mitigation of accidentally typing a YubiKey password in an open forum?

passwords authentication multi-factor otp yubikey

feb 19 at 16:35 user20933 21

3

7

votes

2

answers

244

views

What unique risks does MVC model binding bring to a website? What additional vigilance is needed?

web-application appsec threat-mitigation asp.net-mvc ruby

feb 6 at 14:15 Dinu S 1,481

7

votes

3

answers

356

views

Is a mobile app more secure for mobile use than the “normal” website?

web-application ssl mobile phishing

feb 5 at 19:53 makerofthings7 12.5k

2

7

votes

3

answers

150

views

If multi factor authentication is enabled, how should that affect self-service password reset?

passwords authentication password-management multi-factor yubikey

feb 3 at 22:14 Brian Kelly 141

7

votes

1

answer

401

views

Have any viruses leveraging the GPU been discovered in the wild? What is the mitigation?

web-browser antivirus antimalware defense threat-mitigation

dec 21 at 10:34 Gilles 9,987

7

votes

1

answer

263

views

Can WiFi absorbing wallpaper absorb enough signal to provide a legitimate security benefit?

wifi

nov 28 at 6:52 Community♦ 1

2

7

votes

4

answers

346

views

How should I escalate a vulnerability that is dismissed by the vendor?

ethics exploit disclosure

nov 13 at 19:19 Rory McCune 14.3k

2

7

votes

3

answers

170

views

How do I test and secure ASN.1 Parsers?

vulnerability-scanners protocols xml asn1

sep 14 at 17:35 Thomas Pornin 82.3k

1

7

votes

4

answers

1

kviews

Can Javascript/Flash verify the SSL connection to prevent “SSL Inspection”?

appsec ssl certificates flash silverlight

jun 13 '12 at 20:59 makerofthings7 12.5k

1

7

votes

1

answer

359

views

Should iPhone backups be encrypted? Is this in-scope for Corporate IT if the device is linked to a home pc?

corporate-policy mobile backup ios

jun 13 '12 at 5:22 Community♦ 1

3

7

votes

2

answers

470

views

What information is exposed by simply opening an RDP connection to the internet?

windows vpn rdp azure

mar 19 '12 at 7:40 Taylor Gibb 146

Technology			Life / Arts	Culture / Recreation	Science	Other
Stack Overflow Server Fault Super User Web Applications Ask Ubuntu Webmasters Game Development TeX - LaTeX	Programmers Unix & Linux Ask Different (Apple) WordPress Answers Geographic Information Systems Electrical Engineering Android Enthusiasts IT Security	Database Administrators Drupal Answers SharePoint User Experience Mathematica more (14)	Photography Science Fiction & Fantasy Seasoned Advice (cooking) Home Improvement more (13)	English Language & Usage Skeptics Mi Yodeya (Judaism) Travel Arqade (gaming) Bicycles Role-playing Games more (22)	Mathematics Cross Validated (stats) Theoretical Computer Science Physics more (7)	Stack Apps Meta Stack Overflow Area 51 Stack Overflow Careers

site design / logo © 2013 stack exchange inc; user contributions licensed under cc-wiki with attribution required

rev 2013.5.17.690