2,224 reputation
1917
bio website
location
age
visits member for 2 years, 7 months
seen 2 days ago

Oct
3
comment Where does the WPS Pin fit into the 4-way-handshake?
WPS must come before this stuff, because the STA does not the master secret and so cannot compute a PTK.
Sep
25
comment Using a virtual machine as a buffer between USB media and OS
Do you mean paravirtualization or classical OS emulation (WMWare)? Are you concern about USB driver vulns?
Sep
24
awarded  Yearling
Sep
20
comment What is the difference between https://google.com and https://encrypted.google.com?
@EvanTeitelman The link becomes a redirect when I click on it.
Sep
20
comment What is the difference between https://google.com and https://encrypted.google.com?
@KonradRudolph User profit is possible, indirectly: the referer makes it possible to log the origin of external links (from Y to X); sometimes these links generate a 404 error in X; if the webmaster of X cares enough, he could get in touch with the webmaster of Y so that links could get fixed. From the amount of broken links I see, I conclude that this is very rarely done. The best way to deal with broken links is obviously to avoid them in the first place, with stable URLs.
Sep
15
revised Avoid being implicated in criminal activity when using Tor
retag: add legal
Sep
15
suggested suggested edit on Avoid being implicated in criminal activity when using Tor
Sep
13
comment Does a OS manufacturer have permission to access your computer unauthorized?
@TerryChia "off-topic because it is about the legalities of the matter, which isn't accepted here" Really? Since when? Why do we have a legal tag?
Sep
9
comment Is it possible to make one processor look like another?
http://www.urbanmyth.org/microcode/ -> not found :(
Sep
8
comment ARP poisoning between a wired and wireless network
Open Wifi ou WPA?
Sep
7
comment Figure out how internet access is being monitored
@Iszi "Privacy rights when you're using someone else's computer or network in general, absent explicit agreements otherwise, should be expected to be non-existent." It depends in which jurisdiction. In France, even using the employer computer and network, an employee has privacy rights.
Sep
3
comment Is the Web browser status bar always trustable?
@MrJamin "The ping attribute, if present, gives the URLs of the resources that are interested in being notified if the user follows the hyperlink. The value must be a set of space-separated tokens, each of which must be a valid non-empty URL. The value is used by the user agent for hyperlink auditing" Links created by a and area elements See also jibbering.com/blog/?p=192
Sep
3
comment Is the Web browser status bar always trustable?
"for browsers like Chrome where the address pop-up appears inside the page area" it seems that the Chrome designers did not bother with a reserved, separated, impossible to spoof status bar (such as the FF status bar if you disable JS changing of the status) because they did not believed the status bar had any security benefits.
Sep
3
answered Is the Web browser status bar always trustable?
Sep
3
revised Do salts have to be random, or just unique and unknown?
retag: add password, hash, salt
Sep
3
comment Is the Web browser status bar always trustable?
Where is Chrome "status bar"?
Sep
3
comment Is the Web browser status bar always trustable?
@RBerteig Yes: some people copy and post the Google feedback URL to forums instead of the destination URL. Google should use PING (and browser should enable PING whenever they allow this destination hiding).
Sep
3
comment Is there any reason to show the same message for invalid username as password?
Rate Limit globally? by origin IP?
Sep
3
suggested suggested edit on Do salts have to be random, or just unique and unknown?
Sep
2
comment Do salts have to be random, or just unique and unknown?
let us continue this discussion in chat