Reputation
357
Top tag
Next privilege 500 Rep.
Access review queues
Badges
3 12
Newest
 Nice Answer
Impact
~19k people reached

  • 0 posts edited
  • 3 helpful flags
  • 103 votes cast
Aug
10
awarded  Nice Answer
Nov
14
awarded  Notable Question
Nov
4
revised OpenVPN dhparam
edited tags
Nov
4
comment Pros/Cons to OpenVPN vs “VPN over OpenSSH”
Creating a tunnel over SSH (TCP) has some negative performance implications because of how TCP works. See: sites.inka.de/~W1011/devel/tcp-tcp.html
Oct
31
comment Is using self-signed certificates an option for this m2m scenario
How are you remotely managing these devices? I would be strongly tempted to manage them with puppet, which also happens to include a CA infrastructure and creates per-computer certs on every client. With that in place you simply need to trust your Puppet CA.
Oct
29
comment Clear EFS Cache at Set Interval
So, EFS works. However, he also wants the user to be prompted for their certificate password - Why? What type of attack does he think this would help in defending against? Making things pointlessly complex does not make the system more secure.
Sep
17
comment Download Torrents on University network without detection
I can do to prevent them from knowing? - Pay for your own internet connection.
Aug
19
comment Using + for email addresses to find out who is selling your data: is it naive or is it effective?
I don't use username+foo@gmail.com only for spam prevention. It is also very useful for building rules within my mailbox. It is very effective for automatically sorting and filtering legitimate messages.
Apr
14
awarded  Popular Question
Jan
30
answered Why does changing physical router not warn of possible man in the middle attack?
Nov
27
comment Can you securely wipe an SSD by filling the remaining space with bogus data?
SSDs do not make the entire internal capacity visible via the sata/usb interface. There is additional storage that is used when blocks fail by bad block mapping algorithms inside the drive. Since you cannot get to those blocks via the standard interface there is no way to over-write it simply using software. The assumption here is that a motivated attacker might have the skills to pop that drive open and directly access the hardware.
Nov
27
comment How much are 0-days worth?
Simple, they are worth as much as somebody will pay for them.
Sep
14
awarded  Student
Sep
14
asked OpenVPN dhparam
May
17
comment How to avoid scripts with hardcoded password?
Does a key-pair really change things though? You still have a set of credentials stored on the filesystem. You have only really changed the size/type of the credentials. Unless of course you are doing something fancy with a hardware security device where the private key isn't on the filesystem.
Apr
29
comment Why are Lengthy Password Stronger Than Complex?
If the attacker knows that a password is composed only of correctly spelled lower case English words, then you don't have to attack character by character. You attack word by word.
Apr
19
comment TrueCrypt External Multimedia Hard Drive
Truecrypt is volume level encryption. Anything within that truecrypt volume will be encrypted. Any files, filesystem meta-data, deleted files. Each and every block is encrypted. The only way to access is it is by decrypting it.
Apr
19
comment Could you attack a port without knowing what service was listening?
A large number of services will identify themselves in some way when you connect to the port. IE nc localhost 22 returns SSH-2.0-OpenSSH_5.9p1 Debian on my system.
Apr
13
comment Why should I use the VPN?
the term VPN covers a broad range of technologies, that can connect specific hosts, or whole networks together. The connection, may be encrypted, but can also be unencrypted. So what you use it for, depends on what you want to use it for. You configured to fit your requirements.
Apr
9
comment How can I protect my internet-connected devices from discovery by Shodan?
@Matt, Or at least don't use the stock firmware. The security problem is about the firmware.