349 reputation
28
bio website
location
age
visits member for 2 years, 2 months
seen Feb 8 at 18:50

Jan
24
awarded  Yearling
Aug
21
awarded  Constituent
Aug
21
awarded  Caucus
Mar
14
awarded  Benefactor
Mar
12
comment In Linux, when I consider trusting a new software source, what do I need to evaluate?
More info at: openSUSE: en.opensuse.org/SDB:Secure_installation_sources GPG: gnupg.org/gph/en/manual.html#AEN161
Mar
9
answered Protection of Keys/Passwords on Virtual Hardware (XEN, KVM, VMWare, etc.)
Mar
9
answered How does OWASP ESAPI protect against direct object reference vulnerabilities?
Mar
9
revised Is there a benefit in using Oracle's WRAP to obfuscate PL/SQL Code
added 270 characters in body
Mar
9
revised Is there a benefit in using Oracle's WRAP to obfuscate PL/SQL Code
added 270 characters in body
Mar
9
answered Is there a benefit in using Oracle's WRAP to obfuscate PL/SQL Code
Mar
9
comment HITECH : New United States Federal Act on Data Security
That's because HITECH is a different law 12.5 years newer than HIPAA. Title XIII of Division A of the American Recovery and Reinvestment Act of 2009 (the "stimulus bill") states that "the HITECH Act" refers to that title and Title IV of Division B.
Mar
9
comment Does OtR require than IM applications remember multiple keys per contact?
It would seem to be this protocol. cypherpunks.ca/otr/Protocol-v2-3.1.0.html
Mar
9
comment Protection of Keys/Passwords on Virtual Hardware (XEN, KVM, VMWare, etc.)
I don't have a real answer as I don't know the research or the experience. But the principle I'd apply is that if a CPU (whether real or virtual) can access your secrets, then someone who controls that CPU can access them. It's within the ability of a determined amateur to make these kinds of profound changes in the behavior of a program, such as a virtual machine host program, by modifying its machine-language code. Someone who pays for a virtual private server could usually hope to rely on legal and economic protections rather than technical protections.
Mar
8
revised In Linux, when I consider trusting a new software source, what do I need to evaluate?
corrected hyperlink markdown
Mar
8
comment how to protect my ftp from being hacked?
OK, I think we misunderstood that you might be uploading via FTP protocol. Because you are in fact uploading via the mechanism called "HTTP upload", yes, htaccess/htpasswd is advisable. There is a risk that you should be aware of. If you have to use "AuthType Basic" you will be at risk of further problems. Please see about using "AuthType Digest". "Require" directives, if available, might be a workable alternative or supplement. I haven't explained all the details, but you can get them starting with the tutorial: httpd.apache.org/docs/current/howto/htaccess.html
Mar
8
answered In Linux, when I consider trusting a new software source, what do I need to evaluate?
Mar
7
answered how to protect my ftp from being hacked?
Mar
7
revised In Linux, when I consider trusting a new software source, what do I need to evaluate?
added 4 characters in body
Mar
7
revised Are there any same origin issues (SOP) with TOR?
added 562 characters in body
Mar
7
answered Are there any same origin issues (SOP) with TOR?