138 reputation
7
bio website
location Fort Lauderdale, FL
age 30
visits member for 2 years, 9 months
seen Dec 7 at 7:31

System architect & Linux admin for cloud.com (Citrix).


Oct
17
comment Force a connection via SSL3 to detect POODLE vulnerability
Note that just because SSLv3 is used on a connection does not mean it is vulnerable to POODLE. You can also disable CBC ciphering to prevent the attack.
Sep
9
comment Can I scratch off the magnetic strip off a debit card to only allow chip and PIN?
@Phil Get some sanding paper and sand the number off? Or epoxy to cover them and make them unimprintable. :-)
Feb
28
comment can ssh passwordless public key authentication be ok if combined with a VPN?
Edit: meant to say I like YoavAner's answer. Doh!
Feb
28
comment can ssh passwordless public key authentication be ok if combined with a VPN?
Good point on the merit of a key when VPN and ssh share a password. I hadnt looked at it that way. I really like this answer along with AndrewRussell's. Will think on it and decide which I want to be the accepted answer. Thanks
Feb
28
comment can ssh passwordless public key authentication be ok if combined with a VPN?
This is largely the type of answer I was looking for, but what if the public key is only used for jumping between servers, not used for connecting from the personal computer? Though I dont know if its possible to restrict ssh to only accept the key if it comes from a certain subnet.
Feb
27
comment can ssh passwordless public key authentication be ok if combined with a VPN?
@logicalscope ya, youre right. I tried to ask too many different questions. Editing it down to a specific few.