580 reputation
214
bio website
location
age
visits member for 2 years, 10 months
seen Nov 6 at 7:43

Feb
28
answered How to keep secure while browsing on open wifi when SSL VPN is blocked?
Feb
27
answered Different strategies for online anonymity and their +/-s?
Feb
27
comment What lawful interception standards are used outside Europe?
As a side note, if you need to know, don't expect a standard to tell you everything. I doubt standard are followed all the time and assuming the worst case scenario is very important when talking about security (weakest link, bla bla). Would you mind explaining why you mind about this? Just curiosity?
Feb
27
comment Why would someone register a Facebook account with a stolen email address?
We could debate this for hours, there are obviously a great number of possibilities. My answer just tried to explain why would one possibly want to use another's email to register a facebook account. Let's not get off topic here.
Feb
27
comment What are these ip adresses my computer is connected and how do I block them if they are malicious?
+1 for CodeInChaos, I suggest you kill all programs which access the internet in a legitimate way before (firefox, piding, thunderbird, etc). The output will be cleared.
Feb
27
comment Why would someone register a Facebook account with a stolen email address?
Yes. Besides, how would you create an email address? You are asked to provide some information and you should stay careful to what data you expose (your browser leaks data, your IP, etc) without knowing. It's kind of an issue, it's stealthier to use someone else's mail account.
Feb
27
awarded  Benefactor
Feb
26
comment SSL fingerprint inconsistency: what does it mean?
As a matter of fact, it does... That's unfortunate though.
Feb
26
answered How to prevent private data being disclosed to unwanted audience over internet?
Feb
26
awarded  Scholar
Feb
26
comment SSL fingerprint inconsistency: what does it mean?
Thanks, I have to wait 11 hours to award the bounty, thanks for your dedication, things are clearer in my head. I don't need papers or references anymore, it's just logical. It makes even more sense now that I remember that one can easily disable a host from a pool of servers, quickly disabling affected servers. Response time is thus improved while keeping availability and making maintenance easier.
Feb
26
accepted SSL fingerprint inconsistency: what does it mean?
Feb
26
revised SSL fingerprint inconsistency: what does it mean?
added 423 characters in body
Feb
26
comment Public key system confusion
With all due respect, I'd rather not share my email address. I help people here when I ask a question usually, and when I'm done, I'm out of here. Besides, many other members are at least as competent as I am, I don't deserve such attention... Thanks though.
Feb
26
answered Why would someone register a Facebook account with a stolen email address?
Feb
26
comment SSL fingerprint inconsistency: what does it mean?
I understand. I just wonder, if there is a failure concerning one cert, MITM attacks are possible on everyone visiting facebook, so it doesn't improve security in this case, right? In either case, you have to wait for the revocation and change certificates. If one cert leaked, why not the others? Since it's the same setup, it's very likely. A set up where spare cert are kept hidden is more secure. It's only in the best case scenario that multiple cert are useful (isolated failure), and certs have to be changed, changing 10 or 200 hosts' cert shouldn't take a lot of time. Does this make sense?
Feb
26
comment Public key system confusion
You don't decrypt it, you verify the signature. It's different. For this case, you use hist public key. For decrypting, you use your private key.
Feb
26
comment How to refute “don't use internet if you don't like it” answer?
To enforce such policies, websites make user sign in, read and understand the ToS and confirm. It's a contract between the user and the service provider. So if he's still saying such BS, you can always go to court and prove him wrong/stupid. It's legal stuff, not related to the Internet.
Feb
26
comment SSL fingerprint inconsistency: what does it mean?
As a side note, "OCSP can be vulnerable to replay attack", it seems that using an old revoked certificate is still possible for a MITM attacker. Just thought it might interest future readers. But let's not talk about it anymore. It's not the point.
Feb
26
answered Public key system confusion