101 reputation
2
bio website qgustavor.tk
location Goiânia
age 21
visits member for 1 year, 5 months
seen 2 hours ago

Jul
27
comment Why disable JavaScript in Tor?
There are some ways from this question, but Tor disables those even with JavaScript enabled, like disabling WebRTC and detecting some bad behaviors.
Jul
18
comment Why doesn't DNS spoofing work against an HTTPS site?
One thing about this: it's common in my country to people ignore those warnings because our government CA isn't installed by default in browsers. It's security hole here, I don't know about other countries. In the other hand: use HSTS to disable the possibility to ignore the warning, better if pre-loaded.
Jun
30
comment Unsubscribe safely
Seems that title is a quite simple: I thought it was about how to implement a secure unsubscribe link when I saw it in Hot Network Questions.
Jun
11
comment How do I verify that WhatsApp is using end-to-end encryption?
@Ulkoma What if I text it to myself? (i.e. other device of mine) There's a law against that? Can I just say I was just taking a note about your comment?
Jun
11
comment Identicon for SSL certificate
Does someone already suggested to be implemented in a browser, beside the one cited? Some browser, like Chrome, could show it when users click "Advanced" on a SSL error. Maybe also show a button to permanently trust the certificate ( like Mozilla do ) when it repeats after some time. Of course it needs to be disabled when HSTS is used.
May
13
comment when is it safe to click through an SSL warning message?
I don't know why browsers don't make that last point easier: even if there is free and trusted HTTPS using proxy servers (like CloudFlare) the proxy server itself is a point of failure. Making easier to check authenticity for unknown CAs and self-signed certs is a good alternative or not? Like showing a randomart when the users show that he "understand the risks".
Mar
2
awarded  Announcer
Apr
15
awarded  Supporter