461 reputation
211
bio website billweiss.net
location Chicago, IL
age 31
visits member for 3 years, 3 months
seen yesterday

I'm a senior sysadmin and manager at Backstop Solutions Group. Getting lots of experience with CentOS and some Cisco hardware, as well as prodding my way through getting Puppet to work.


Apr
18
awarded  Custodian
Apr
18
comment openssl aes 256 cbc strange bug
@Steven thanks for the improvements!
Apr
18
reviewed Approve suggested edit on openssl aes 256 cbc strange bug
Apr
18
answered openssl aes 256 cbc strange bug
Feb
18
awarded  Popular Question
Jan
3
awarded  Yearling
Dec
1
awarded  Nice Answer
Jan
4
answered Tripwire - Is it security Theater?
Jan
3
awarded  Yearling
Jul
21
comment What are the most common password salting methods?
Can you explain this part of your explanation better: "Let's use a salt as large as the hash algorithm's block size. The block size of SHA256 is 512 bites, so let's use a 64-byte salt." ? 512 =/= 64...
Jun
28
comment Government / State cyberwarfare organizations
You're going to have a very hard time finding any documentation here. Most countries don't want to talk about any offensive work.
Jun
26
comment Mod Security for apache2 blocks curl!
What's in the logs for those requests?
May
26
comment Is a rand from /dev/urandom secure for a login key?
On the topic of urandom "running out", you're only sort of right. On a system with a poor entropy source (such as a VM) and a high rate of entropy use (lots of SSH connections, VPN tunnels, etc), urandom will return less random data instead of blocking. "Less random" is a loose term, but it means that you're more likely to see repetition. Is that a problem? Matters on your application :) In this case, urandom is probably fine.
May
26
comment How can I ensure that I connect to the right wireless Access Point?
I'm unsure how Firebug helps with the "fun and profit" of being a rogue AP that an iPhone connects to, I've got to say.
Apr
23
comment Do you detect/react to DNS tunnelling?
Some applications can be detected over the network as well. Browsers are a good example (they send that user agent thing), as are most servers (SSH servers, for example, will say "SSH-2.0-OpenSSH_4.3". RHEL even patches that to say that it's RedHat, or at least it did). Tracking that at the firewall level is left to deep magic :)
Feb
10
awarded  Citizen Patrol
Feb
1
answered How can I ensure that default passwords are no longer in use?
Jan
31
accepted I'm using a Cisco ASA as a VPN endpoint. Where do the VPN clients get firewalled?
Jan
30
answered What free tools or techniques exist to discover anomalies in network flows?
Jan
21
comment Do secure phone lines exist?
You're assuming that there's no end-to-end security (crypto, etc). The question "is your connection secure" is about "have you flipped the 'secure this call' switch" :)