Reputation
Top tag
Next privilege 200 Rep.
See reduced ads
Badges
5
Newest
 Commentator
Impact
0 people reached

  • 0 posts edited
  • 0 helpful flags
  • 3 votes cast
Mar
24
comment Is the save button delay in a Firefox download dialog a security feature? What does it protect?
If they're at the stage where you're running their VBScript or Windows Form Application then they already have control of your computer and wouldn't need Firefox or any other browser to get more stuff on there
Nov
12
comment My college is forcing me to install their SSL certificate. How to protect my privacy?
@immibis True, but I'm working on the assumption that the VPN provider is not free, so therefore knows more about you than just your username. Granted you could have used stolen card details, prepay credit card or whatever else, but I'm not approaching this from the point of view of how to get away with something, merely illustrating that the university may just be doing this to cover their own backsides
Nov
11
comment My college is forcing me to install their SSL certificate. How to protect my privacy?
@immibis The VPN provider wouldn't need to though. If law enforcement goes to a VPN provider and asks who was using this IP address, then they already have the user's details because they'll have used a username and a password. They won't deflect the responsibility of identifying the person to someone else. Chances are if law enforcement are chasing you for something, being in breach of the university regulations is low down your list of worries!
Nov
9
comment My college is forcing me to install their SSL certificate. How to protect my privacy?
Unless the conditions prohibit the use of a VPN then you probably aren't breaking them. The security systems are probably there so that if law enforcement want to know who is visiting a specific page or site then they can be located. If you were going over a VPN then law enforcement wouldn't end up at the University connection, but instead wherever your VPN terminates, meaning the University wouldn't have to do anything.
Apr
22
answered Why don't we reward users who choose strong passwords?
Apr
11
comment Source code as password
@StephenTouset But you still need a password for your password manager! :P
Sep
25
awarded  Commentator
Sep
12
comment Does Skype technology tap a user's machine to route other calls?
Let us continue this discussion in chat.
Sep
12
comment Does Skype technology tap a user's machine to route other calls?
I'm not behind a NAT but sometimes the people I call are. Where do Microsoft claim that they don't route traffic through end users? The only sources I've seen are news articles saying that they don't have end user supernodes (which are not call routers).
Sep
12
comment Does Skype technology tap a user's machine to route other calls?
The old Skype protocol has been deprecated now and no longer works so you can't be using a version of Skype that allows you to be a Supernode. Supernodes are different to call routers though. I'm not on an old version of Skype and neither are the people I call but we still get routed via end-user ADSL connections. That functionality hasn't changed.
Sep
12
comment Does Skype technology tap a user's machine to route other calls?
And being a Supernode was different than routing calls. Supernodes handled authentication and user lookups (this is what Microsoft brought in house when they acquired Skype, although efforts to do this were already underway by Skype themselves after the last serious outage)
Sep
12
comment Does Skype technology tap a user's machine to route other calls?
Skype still does occasionally route through end user desktops. I've not got a linked source for this but I've noticed it using bandwidth between 2 IP addresses (and also when I've had calls routed I've looked at the IP addresses that it communicates through and they're sometimes end user ADSL connections)
Aug
9
awarded  Informed
May
9
awarded  Supporter
Sep
19
comment Popular Security “Cargo Cults”
Regarding your first point, most of the corporates I've dealt with have to do this to get round the filters in their email system. The scanners (GMail included) won't allow you to send zip files with exe files in them, so you need to encrypt the zip file to send it (although personally I just rename the zip file to zop, then GMail leaves it alone!)
Jun
19
comment Is encryption in HTTPS done by the browser or by the system?
For example, you can install a program called Fiddler for debugging http applications. This has the option to install a root certificate specifically so that it can decrypt SSL traffic on your own computer. It creates a certificate from this root certificate for every site you visit (all with "DO NOT TRUST" in their name so you can easily delete them after). It's a good example if you want to see it in action.
May
9
comment Intel How Strong is Your Password page, good advice?
@Fase - Good point, I hadn't actually noticed that. Having said that though, clicking on the link now does actually take you to a page protected by SSL!
May
9
comment Intel How Strong is Your Password page, good advice?
Nice to see them hosting the site on SSL as well so that no one can sniff your passwords as you merrily type them in... oh wait!
Aug
24
awarded  Teacher
Aug
24
awarded  Autobiographer