meta user
network profile
| bio | website | wegnerdesign.com |
|---|---|---|
| location | Westmont, IL | |
| age | 21 | |
| visits | member for | 1 year, 8 months |
| seen | Apr 16 at 14:27 | |
| stats | profile views | 12 |
About Me.
|
Apr 12 |
asked | Botnet Attempting to Login to Website |
|
Nov 5 |
awarded | Commentator |
|
Nov 5 |
comment |
How do you log in from an unsecured computer? @Izkata The software definitely still exists. We used it in the last company I worked for. Made me feel terrible spying on a coworker, but it was a very specific instance in that we needed hard evidence of "adult content" being viewed on a company device. The software was cheap, and hard to detect to the average user. Could easy be installed maliciously on any 'unsafe' computer. |
|
Oct 16 |
comment |
Proxy Non-HTTPS logins through EC2 Agreed - there's nothing I could do to avoid a MITM on amazon's servers. However, the vast majority of Amazon servers aren't used for this sort of proxying, so I think there would be a low risk of targeting. The end-goal would be a widely distributed service, so I don't think 100% proxying of all web traffic is doable - it's just too slow. I know that the only real security in this situation would be for the service to SSL, but I'm looking for a next-best-thing here. |
|
Oct 16 |
asked | Proxy Non-HTTPS logins through EC2 |
|
Sep 12 |
awarded | Yearling |
|
Jul 30 |
comment |
How can crackers reconstruct 200k salted password hashes so fast? This might be somewhat of a shameless plug, but I also think this article could be useful to any readers that want to understand the mechanics of password hacking. wegnerdesign.com/blog/passwords-part-1-how-they-get-hacked |
|
Jul 23 |
comment |
Vulnerabilities in Host Proof Hosting he says in his list paragraph "It's one thing to point at the flaws that make it hard to do cryptography in Javascript and propose ways to solve them; it's quite a different thing to simply wish them away." I'd like to see proposals for ways to fix things, rather than just pointing out the problems. |
|
Jul 20 |
comment |
Vulnerabilities in Host Proof Hosting That 'Javascript Cryptography Considered Harmful' is a good read, though he seems to contradict himself by only pointing out flaws and not providing solutions. What is the solution then - I don't want to store keys on a server, to avoid access if there is a breach, so how can I keep my user's data safe? |
|
Jul 20 |
awarded | Scholar |
|
Jul 20 |
accepted | Vulnerabilities in Host Proof Hosting |
|
Jul 19 |
asked | Vulnerabilities in Host Proof Hosting |
|
May 18 |
comment |
sanitizing likes/unlikes in application? My apologies - I thought you meant server-side just for the form-based values. You should be good then :) |
|
May 18 |
comment |
sanitizing likes/unlikes in application? Updated code to JS. But, please keep in mind the security warning. Validation in JS is not a safe alternative to server-side validation |
|
May 18 |
revised |
sanitizing likes/unlikes in application? Warning about JS |
|
May 18 |
answered | sanitizing likes/unlikes in application? |
|
Dec 20 |
comment |
Securing an area both physically and technically Thanks for the insight - especially a couple weeks in it's nice to look back over our progress. The majority of your suggestions have been implemented since day 1, but we're having some issues with the entering/exiting strategy of security. We often run these jobs in the middle of the night, and don't have an IT guy in at that hour. So, we've defaulted to blocking internet/locking doors from when we leave at night until we come back in the morning (pending a security job is scheduled). Still brainstorming a way to automate that process without creating security holes. |
|
Nov 17 |
awarded | Nice Question |
|
Nov 16 |
revised |
Mac sending hundreds of packets to gateway weird formatting |
|
Nov 16 |
awarded | Editor |
