Ramhound

441 reputation

bio	website
	location	Georgia
	age	30
visits	member for	1 year, 9 months
	seen	6 hours ago
stats	profile views	257

	441 reputation	bio	website		visits	member for	1 year, 9 months
28 badges		location	Georgia		seen	6 hours ago

summary answers questions tags badges favorites bounties reputation activity

835 Actions

suggestions reviews revisions comments badges posts accepts all

6h	comment	Can attackers steal SSL certificate from server and use it for MITM attacks? @HenrickHellström - You make some valid points.
6h	comment	Does providing OAuth for mobile apps pose a security threat? What information exactly? The OAuth authentication information would be sent using a secure `https` connection at least it SHOULD BE that would be up to the website in question to support.
6h	comment	Can attackers steal SSL certificate from server and use it for MITM attacks? @HenrickHellström - I understand that. The point of my comment is that if the author is worried about MITM attacks a self-signed certificate won't protect his users, since there is no way of knowing, if the certificate your using is actually the author's or not. The only saving grace of the author's is that the application would reject this "clone" certificate as not being the same, if were to say, be replaced on the server. If its a matter of trust the author is worried about ( and MITM attacks are exactly that because a lack of trust ) a CA signed certificate is the way to go.
17h	comment	Store username in cookie for a web site Lots can be done with a username but an attacker can't access a cookie from any random domain they want.
17h	comment	Does providing OAuth for mobile apps pose a security threat? The application sends the required information which includes a url if required.
17h	comment	Can attackers steal SSL certificate from server and use it for MITM attacks? @BibLex - they could just sign a new certificate....with exactly the same information if they wanted. If you are that worried get a CA signed certificate.
17h	comment	Why standards organizations give so short protection times for 128 bit encryption? > clearly means at some point after 2030.
1d	comment	Why do a lot of Android apps (like Linkedin) require many unrelated privileges? @AdamArold - I guarantee you that Facebook is accessing your contact list on your phone.
2d	comment	Ways to look for changes on a PC This is an educated guess. They looked at what your MAC address is and added it to their allowed list. If you are really worried GO ASK THEM!
May 17	comment	Vulnerability testing without the use of exploits? @ub3rst4r - This is what a virtual machine is used for. If its your server what does your host care?
May 17	comment	How does YouTube prevent automatic piracy? Google just annouced paid YouTube channels recently. UFC is one of those channels.
May 17	comment	How does YouTube prevent automatic piracy? @Yuri - Its prompted on YouTube.com
May 17	comment	Prevent Malware attack on my site @Codeeater - One thing is clear is the server was compromised. You need to secure the server by doing a complete and total reinstall.
May 14	comment	Salting in encryption (rather than hashing) Why exactly would you salt what you encrypted. The entire point of encrypting data is to decrypt it.
May 13	comment	Disk Erasing Security - Odd Number of Writes @Celada - There is one way I know how only wiping a hdd once is secure, one of many, but trying to address your false statement. You only need to zero a hdd once, encrypt the entire drive, and any data was there cannot be recovered. You could even encrypt the current data on the drive, wipe the drive once, and nonthing on the drive including the free space could be recovered.
May 12	comment	Why is WPA Enterprise more secure than WPA2? Where exactly did you read this? There is no doubt `WPA2` is more secure then `WPA`. I would argue that `WPA Enterprise` is an entirely different authentication model then `WPA`
May 12	comment	Can you tell if your computer was hacked and pictures stolen from 2-6 months ago? @TekTengu - To expand on your answer there are lots of ways a photo could have been automatically uploaded to a social website. iTunes for example uploads photos automatically to iCloud. I agree with your advice dealing with the human element, politely tell her, you had nothing to do with leaking the photos to anyone.
May 10	comment	Who to assign read/write access rights for a single-user application to run correctly? Users have permissions to these folders by default. If they are part of the `User` group then they have the require permissions. Windows XP places the data in a different location then everything after Vista or it should.
May 10	comment	Is this Data Encryption/Storage Method Secure? @BWDesign - There are entire teams of people who publish their code, go through security aduits and allow the public to review their work. Furthermore the law surrounding this information informs you how you should protect it, what is and what is not acceptable, its up to you to find the library to implement it and make sure you have an aduit to confirm your implementation is correct.
May 10	comment	Password storing in Google Chrome content scripts Anyone with access to your computer can gainst access to your credentials. Since the script is plain text there is nothng to protect it. There are other secure ways of keeping your login credentials like Chrome password manager that at least encrypts that data.