Aki

475 reputation

111

bio	website
	location
	age
visits	member for	1 year, 3 months
	seen	May 16 at 8:18
stats	profile views	18

	475 reputation	bio	website		visits	member for	1 year, 3 months
111 badges		location			seen	May 16 at 8:18

summary answers questions tags badges favorites bounties reputation activity

94 Actions

suggestions reviews revisions comments badges posts accepts all

Mar 2	revised	How to keep secure while browsing on open wifi when SSL VPN is blocked? added 5 characters in body
Feb 28	answered	How to keep secure while browsing on open wifi when SSL VPN is blocked?
Feb 27	answered	Different strategies for online anonymity and their +/-s?
Feb 27	comment	What lawful interception standards are used outside Europe? As a side note, if you need to know, don't expect a standard to tell you everything. I doubt standard are followed all the time and assuming the worst case scenario is very important when talking about security (weakest link, bla bla). Would you mind explaining why you mind about this? Just curiosity?
Feb 27	comment	Why would someone register a Facebook account with a stolen email address? We could debate this for hours, there are obviously a great number of possibilities. My answer just tried to explain why would one possibly want to use another's email to register a facebook account. Let's not get off topic here.
Feb 27	comment	What are these ip adresses my computer is connected and how do I block them if they are malicious? +1 for CodeInChaos, I suggest you kill all programs which access the internet in a legitimate way before (firefox, piding, thunderbird, etc). The output will be cleared.
Feb 27	comment	Why would someone register a Facebook account with a stolen email address? Yes. Besides, how would you create an email address? You are asked to provide some information and you should stay careful to what data you expose (your browser leaks data, your IP, etc) without knowing. It's kind of an issue, it's stealthier to use someone else's mail account.
Feb 27	awarded	Benefactor
Feb 26	comment	SSL fingerprint inconsistency: what does it mean? As a matter of fact, it does... That's unfortunate though.
Feb 26	answered	How to prevent private data being disclosed to unwanted audience over internet?
Feb 26	awarded	Scholar
Feb 26	comment	SSL fingerprint inconsistency: what does it mean? Thanks, I have to wait 11 hours to award the bounty, thanks for your dedication, things are clearer in my head. I don't need papers or references anymore, it's just logical. It makes even more sense now that I remember that one can easily disable a host from a pool of servers, quickly disabling affected servers. Response time is thus improved while keeping availability and making maintenance easier.
Feb 26	accepted	SSL fingerprint inconsistency: what does it mean?
Feb 26	revised	SSL fingerprint inconsistency: what does it mean? added 423 characters in body
Feb 26	comment	Public key system confusion With all due respect, I'd rather not share my email address. I help people here when I ask a question usually, and when I'm done, I'm out of here. Besides, many other members are at least as competent as I am, I don't deserve such attention... Thanks though.
Feb 26	answered	Why would someone register a Facebook account with a stolen email address?
Feb 26	comment	SSL fingerprint inconsistency: what does it mean? I understand. I just wonder, if there is a failure concerning one cert, MITM attacks are possible on everyone visiting facebook, so it doesn't improve security in this case, right? In either case, you have to wait for the revocation and change certificates. If one cert leaked, why not the others? Since it's the same setup, it's very likely. A set up where spare cert are kept hidden is more secure. It's only in the best case scenario that multiple cert are useful (isolated failure), and certs have to be changed, changing 10 or 200 hosts' cert shouldn't take a lot of time. Does this make sense?
Feb 26	comment	Public key system confusion You don't decrypt it, you verify the signature. It's different. For this case, you use hist public key. For decrypting, you use your private key.
Feb 26	comment	How to refute “don't use internet if you don't like it” answer? To enforce such policies, websites make user sign in, read and understand the ToS and confirm. It's a contract between the user and the service provider. So if he's still saying such BS, you can always go to court and prove him wrong/stupid. It's legal stuff, not related to the Internet.
Feb 26	comment	SSL fingerprint inconsistency: what does it mean? As a side note, "OCSP can be vulnerable to replay attack", it seems that using an old revoked certificate is still possible for a MITM attacker. Just thought it might interest future readers. But let's not talk about it anymore. It's not the point.