274 reputation
15
bio website
location
age
visits member for 2 years, 7 months
seen Apr 10 at 19:44

Feb
13
comment Security of carrying passwords on person
@Daisetsu you have to remember that even with a dictionary attack the English language is massive oxforddictionaries.com/us/words/….
Feb
13
comment Security of carrying passwords on person
I would have to disagree with it having to be hard to remember. One of the easiest ways to gain entropy is by using a phrase instead of a word which is generally easier to remember than most short passwords. My favorite comic regarding this issue is xkcd.com/936.
Dec
12
comment Password algorithm to be integrated on a website
If you are looking to implement a design to store passwords securely and are familiar with Ruby. I would checkout Devise (commonly used in rails applications) at github.com/plataformatec/devise to see how they implement it.
Jul
10
answered Is a self-signed SSL certificate much better than nothing?
Jul
10
comment Is a self-signed SSL certificate much better than nothing?
Self signed certificates use the same algorithms as the certificate authorities, so you get the protection of encryption. Related: security.stackexchange.com/questions/8110/…
Jun
17
comment Spam mail from my yahoo mail
I believe this is out of the scope of this site. Also, why are the screenshots on Wikisend and not embedded here?
Jun
12
comment Is it legal to find bugs on a website and report them to the website's owner?
@syb0rg I'm no lawyer, but depending on exactly what was done the US could request extradition. It is unlikely in most cases as I doubt they would be big enough to deal with, but it is a possibility. See this article may offer some insight on cyber crimes: fbi.gov/atlanta/press-releases/2013/…
Jun
11
comment How Browsers prevents Malware and Phishing attacks
It does. However, Chrome, which is an asset of Google, does have some privacy issues for this trade-off. lifehacker.com/5763452/…
Jun
11
revised Is it legal to find bugs on a website and report them to the website's owner?
added 98 characters in body
Jun
11
comment How Browsers prevents Malware and Phishing attacks
I think Chrome checks the URL against Google's servers. developers.google.com/safe-browsing
Jun
11
revised Is it legal to find bugs on a website and report them to the website's owner?
deleted 8 characters in body
Jun
11
answered Is it legal to find bugs on a website and report them to the website's owner?
Jun
4
comment What are the statistics on how often client form submissions fail CAPTCHAs?
I think if you are asking the last question you may want to ask yourself what other tools are out there to prevent bots, which of these can work together, and would they inconvenience the user too much. Some alternatives include honeypots and Asirra an image based captcha system by Microsoft.
May
29
comment How is an HTTPS login secure when pages use HTTP?
@LucasKauffman I'm not saying it's the same for every connection. What I am saying is the reason ebay may not have SSL on every page is because once the Symmetric Key is determined they will use it for a certain amount of time. From what was said in class at USU was that the more messages that are encrypted with the symmetric key the easier it is to break. In an ideal world the symmetric key should be thrown away after one encryption is what I was taught. So, I'm just think eBay may do it to protect that specific user's session.
May
29
comment How is an HTTPS login secure when pages use HTTP?
Just a thought based off of stackoverflow.com/questions/6088583/…. But, Asymmetric keys take longer than symmetric keys in the encryption/decryption process. Given that a symmetric key is negotiated it is best to conserve the amount of times it is used, because symmetric keys become easier to break as the number of messages sent using the key increase.
May
13
comment Virus with PGP Encryption Preventing Virus Scan
You could probably get a similar effect using an Ubuntu live-cd, seahorse-tool (to decrypt PGP), and ClamAV (for the virus scanning).
Dec
17
revised help understanding client certificate verification
added 191 characters in body
Dec
17
answered help understanding client certificate verification
Aug
24
awarded  Yearling
Aug
7
revised What kind of certificate do I need to be able to sign my own subdomain certificates?
added 60 characters in body