3,880 reputation
1420
bio website
location
age
visits member for 2 years, 5 months
seen yesterday

Aug
27
answered What are some examples of legal action taken as the result of a security breach?
Aug
27
revised How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?
added 234 characters in body
Aug
21
answered How can I know that the CA certificates in my computer have not been spoofed?
Aug
20
revised How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?
deleted 7 characters in body
Aug
20
revised How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?
deleted 1016 characters in body
Aug
20
answered How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?
Aug
20
revised How is OTR messaging with Socialist Millionaire Protocol (SMP) protected from Man In The Middle?
deleted 25 characters in body
Aug
20
comment How do WPS (Wi-Fi Positioning System) databases have the MAC Addresses of the networks?
In other words, if you don't potentially want the world to know your home WAP's MAC address, don't broadcast its SSID.
Aug
16
revised Cheating or service disruption by altering client-side code
added 93 characters in body
Aug
14
revised Cheating or service disruption by altering client-side code
added 298 characters in body
Aug
14
answered Cheating or service disruption by altering client-side code
Aug
5
comment How can I identify my phone call is being tracked or tapped?
Unfortunately it may be that the first time you learn that the information is known to someone other than the other person on the call is when you hear it in court. Also, even without a wiretap, the other party to your call may be a mole.
Aug
5
comment How could I totally secure a connection between two nodes?
As @AJHenderson says, verification requires trust which requires verification which requires trust. At some point, the scope of this cycle must extend beyond the digital realm; the two parties to the communication must be given or specify some piece of information that only they can know, but which the other party in the system can easily verify.
Aug
5
revised How could I totally secure a connection between two nodes?
added 78 characters in body
Aug
5
revised How could I totally secure a connection between two nodes?
added 78 characters in body
Aug
5
answered How could I totally secure a connection between two nodes?
Aug
5
comment How could I totally secure a connection between two nodes?
To create a channel over a public network, you must have already exchanged some data offline that can be used to validate trust in an online identity. You cannot build a secure tunnel from whole cloth; both sides have to be able to prove they are who they say they are. As for "external services", a web of trust doesn't require paying money for a third-party certificate, but it does require at least two people to meet offline and digitally sign each others' keys before taking them back to install in their cert stores.
Aug
5
comment How could I totally secure a connection between two nodes?
Perhaps some clarification is needed. It sounds like you want two nodes to be able to communicate securely from the first byte, without a third party being able to decipher anything sent between them, nor being able to impersonate either of them. Is this true?
Aug
2
answered Modes of Attack on Time-Bombed Password
Aug
2
revised Is a self-signed SSL certificate much better than nothing?
added 190 characters in body