226 reputation
17
bio website wegnerdesign.com
location Westmont, IL
age 22
visits member for 2 years, 10 months
seen Apr 2 at 21:04

About Me.


Apr
12
asked Botnet Attempting to Login to Website
Nov
5
awarded  Commentator
Nov
5
comment How do you log in from an unsecured computer?
@Izkata The software definitely still exists. We used it in the last company I worked for. Made me feel terrible spying on a coworker, but it was a very specific instance in that we needed hard evidence of "adult content" being viewed on a company device. The software was cheap, and hard to detect to the average user. Could easy be installed maliciously on any 'unsafe' computer.
Oct
16
comment Proxy Non-HTTPS logins through EC2
Agreed - there's nothing I could do to avoid a MITM on amazon's servers. However, the vast majority of Amazon servers aren't used for this sort of proxying, so I think there would be a low risk of targeting. The end-goal would be a widely distributed service, so I don't think 100% proxying of all web traffic is doable - it's just too slow. I know that the only real security in this situation would be for the service to SSL, but I'm looking for a next-best-thing here.
Oct
16
asked Proxy Non-HTTPS logins through EC2
Sep
12
awarded  Yearling
Jul
30
comment How can crackers reconstruct 200k salted password hashes so fast?
This might be somewhat of a shameless plug, but I also think this article could be useful to any readers that want to understand the mechanics of password hacking. wegnerdesign.com/blog/passwords-part-1-how-they-get-hacked
Jul
23
comment Vulnerabilities in Host Proof Hosting
he says in his list paragraph "It's one thing to point at the flaws that make it hard to do cryptography in Javascript and propose ways to solve them; it's quite a different thing to simply wish them away." I'd like to see proposals for ways to fix things, rather than just pointing out the problems.
Jul
20
comment Vulnerabilities in Host Proof Hosting
That 'Javascript Cryptography Considered Harmful' is a good read, though he seems to contradict himself by only pointing out flaws and not providing solutions. What is the solution then - I don't want to store keys on a server, to avoid access if there is a breach, so how can I keep my user's data safe?
Jul
20
awarded  Scholar
Jul
20
accepted Vulnerabilities in Host Proof Hosting
Jul
19
asked Vulnerabilities in Host Proof Hosting
May
18
comment sanitizing likes/unlikes in application?
My apologies - I thought you meant server-side just for the form-based values. You should be good then :)
May
18
comment sanitizing likes/unlikes in application?
Updated code to JS. But, please keep in mind the security warning. Validation in JS is not a safe alternative to server-side validation
May
18
revised sanitizing likes/unlikes in application?
Warning about JS
May
18
answered sanitizing likes/unlikes in application?
Dec
20
comment Securing an area both physically and technically
Thanks for the insight - especially a couple weeks in it's nice to look back over our progress. The majority of your suggestions have been implemented since day 1, but we're having some issues with the entering/exiting strategy of security. We often run these jobs in the middle of the night, and don't have an IT guy in at that hour. So, we've defaulted to blocking internet/locking doors from when we leave at night until we come back in the morning (pending a security job is scheduled). Still brainstorming a way to automate that process without creating security holes.
Nov
17
awarded  Nice Question
Nov
16
revised Mac sending hundreds of packets to gateway
weird formatting
Nov
16
awarded  Editor