408 reputation
314
bio website
location
age
visits member for 3 years, 4 months
seen 4 hours ago

Jul
8
awarded  Popular Question
Jul
1
answered Securely storing bank account details in database
Jun
30
comment Unsubscribe safely
There is no way. For me, if the email is legitimate, from a reasonably trustworthy source, or from known mailing system (MailChimp, ConstantContact), then I click unsubscribe. If it is pure spam, I block the sender. They already got through a CAPTCHA (SpamArrest), so I know they are at least not a bot.
Jun
29
comment How can you check and analyze SSL ports other than 443?
@SilverlightFox Updated
Jun
29
revised How can you check and analyze SSL ports other than 443?
comment suggested to change title
Jun
22
awarded  Yearling
Jun
21
accepted How can you check and analyze SSL ports other than 443?
Jun
21
comment How can you check and analyze SSL ports other than 443?
I can run a tool on my machine, but I thought a site would be more authoritative and configured correctly, and up-to-date, and easier to use.
Jun
21
asked Should I force Thunderbird to avoid RFC5746 and CVE-2009-3555 security bugs?
Jun
21
asked How can you check and analyze SSL ports other than 443?
Jun
16
awarded  Popular Question
May
27
comment Why use Keepass, etc. if all your passwords are in one place?
@tangrs What if a hacker targets the LastPass developer account, and modifies the code to send all passwords to them? Browsers like Chrome update extensions automatically, and silently. What if the LastPass developer was bribed millions of dollars?
Apr
16
awarded  Notable Question
Apr
10
comment Source code as password
arstechnica.com/security/2013/10/…
Apr
10
comment Source code as password
NO! Chrysanthou had no trouble cracking the SHA1 hash that corresponded to "Ph'nglui mglw'nafh Cthulhu R'lyeh wgah'nagl fhtagn1" for one simple reason. This is a fictional occult phrase from the H. P. Lovecraft short story "The Call of Cthulhu," and it was contained in this Wikipedia entry. If your source is on the internet, your password is crackable!
Apr
4
comment How would you detect an Evil Twin attack, especially in a new environment?
Use the one with the correct MAC address. Have the sign display the MAC address of the WIFI router, and verify that is the MAC address you are connecting to. If the evil access point clones the MAC address, then it will cause general network problems and neither network will work correctly. True, it's not user friendly to verify a MAC address.
Apr
1
accepted How do I convert a GPG certificate to a CRT certificate that can be imported into Windows Certificate Manager?
Apr
1
comment How do I convert a GPG certificate to a CRT certificate that can be imported into Windows Certificate Manager?
Ok. I was planning to use a self-signed certificate. I don't remember how postmaster@example.com got in there, but obviously it doesn't need to be a certificate authority. I don't know why they are incompatible. The keys are just numbers.
Apr
1
comment How do I convert a GPG certificate to a CRT certificate that can be imported into Windows Certificate Manager?
@JensErat When you click the View Certificates button it brings up Windows Certificate Manager. At MattBianco, I noticed that and thought I could sign my own certificate when I got to that step.
Mar
30
comment How do I convert a GPG certificate to a CRT certificate that can be imported into Windows Certificate Manager?
I want to send an encrypted email and check the box in Thunderbird to encrypt it. They already have my public cert as all emails are signed, so once I have their public cert (in a format Thunderbird can use), then I can encrypt it and send to them for them to read. I don't want to use OpenPGP because Thunderbird S/MIME is easier and seamless.