658 reputation
511
bio website orthogonaltonormal.com
location Johnstown, PA
age 33
visits member for 3 years
seen 15 hours ago
//TODO Glorious Lies

Dec
17
comment Why does Windows Ship with Expired SSL Certificates?
@RyanRies seems reasonable; worst case if you do find a legacy app that needs them, you can always add the cert back.
Dec
14
comment Can a neighbour who installed my router access it?
The only thing I'd add is: Make sure you know what your routers default login is BEFORE you reset it.
Dec
7
awarded  Yearling
Nov
21
comment How do major sites prevent DDoS?
So have I. 10-15 years ago a number of kidiot botmasters were able to DDoS major sites off the net. One example: theregister.co.uk/2005/12/28/ebay_bots_ddos
Oct
31
comment Is it fundamentally possible to validate that an unmodified version of your client connects to your server?
The step in the cat and mouse game beyond that is hardware that has anti-tamper sensors in the enclosure and will wipe itself if they go off. Even that will probably fail against a determined attacker with deep pockets for anything in the mass market since the attacker can just keep buying more until they eventually defeat the intrusion detection system.
Oct
30
comment Pattern to allow multiple persons to decrypt a document, without sharing the encryption key?
A strictly practical question: While you can change key storage as suggested below for new documents, how do you intend to handle anything uploaded before the change was made where only the user has a copy of the decryption key...
Oct
13
comment Putting my PGP ID/link on printed business cards
@LateralFractal we printed with ~6 modules of quiet zone vs the 4 minimum in the spec. We never experimented to see if a larger one might've helped (didn't know it was a factor before today).
Oct
13
comment Putting my PGP ID/link on printed business cards
@LateralFractal a few years ago I worked on something on Android using QR codes around v13 in size (~400 bytes); and even printed ~3.5" on a side we had trouble getting anything below a flagship level device to read them reliably. Cameras are better now; but I'm still skeptical of them being able to read that much off a business card sized code.
Oct
12
comment Privacy of Image search with https
Instead of trying to audit the CA list directly (it's going to be full of companies you need but almost certainly have never heard of); spot checking the CA used at home and work are the same. ex my employer uses a product called Bluecoat to monitor network traffic and for anything not on the whitelist it will come up as being secured by bluecoat.employer.com, instead of by the normal CA.
Oct
4
comment Do I need a bachelor's degree to break in information security?
At the end of the day a bachelors degree has become the modern day white collar union card. Possessing one is neither a necessary nor a sufficient condition for being qualified to do the job; but as was the case with installing electrical wiring in our fathers or grandfathers time there are a lot of job sites where it doesn't matter how good you are, you're not going to be hired without one.
Sep
28
comment Is replacing bash with another shell a prudent step?
@muru was that just making it so they could plug their LibreSSL fork in as an alternative?
Sep
17
comment Trying to understand why signatures in root certs “are not used”?
@user53029 either the hash needs to be broken (which happened in 2008 with MD5 hashed certs) or the CA needs to be compromised. Most CA's use heavy physical authority including measures like keeping the root certificate itself offline to prevent catastrophic damage in the event of a hack. security.stackexchange.com/questions/24896/…
Sep
17
comment My IP address (with a NAS) is targeted by a hacker. What to do? Should I be worried?
@LucasKauffman my point is that although they still brand their products as NASes; personal internet server that also serves files is a more accurate description of what they've turned into. That's a device that needs to be connected to the internet for most of what it's designed to do.
Sep
16
comment My IP address (with a NAS) is targeted by a hacker. What to do? Should I be worried?
@LucasKauffman consumer NASes from companies like Synology or QNAP have heavily expanded from only being file servers to include streaming media server, light web server, and "personal cloud" features to differentiate themselves from their cheaper competition.
Sep
12
comment Tell people that I can encrypt emails
I'm surprised that Outlook shows a confusing mess for S/MIME; since I know it supports signing or encrypting email via smartcards.
Sep
9
awarded  Good Answer
Sep
9
comment Why is GSM still used?
@RichHomolka I'm almost certain your "slightly off topic" was the reason the question was asked....
Sep
8
awarded  Yearling
Sep
8
awarded  Nice Answer
Sep
8
comment Why is GSM still used?
@TylerH 2g was first deployed in 91, 3g in 98, and LTE in 08. At the tail end of the time range range, I could see Verizon choosing to deploy an LTE successor on it's current 2g spectrum. Lastly, while it's an OT debate here I'm of the opinion that the needs separate spectrum to operate on criteria that marked 1g vs 2g, and 2g vs 3g transitions; is a more appropriate differentiator for when 4th generation cellular systems came into being than a purely arbitrary speed number.