318 reputation
311
bio website plus.google.com/…
location Anacortes, WA
age 38
visits member for 3 years, 10 months
seen 3 hours ago

Real Name: Chris Francy

I work as a Senior Network Analyst at Northwest Educational Service District #189 in the Technology Services department.

The Technology Service department, in addition to supporting the staff at NWESD, provides network support services to 35 K-12 school districts in Northwest Washington region.

In my free time, when I am not at work or answering questions, I play a lot of video games on the PC (Steam Profile).

You can find more links to various websites and social networks on my Google profile.

profile for Zoredache on Stack Exchange, a network of free, community-driven Q&A sites


Nov
14
awarded  Notable Question
Nov
4
revised OpenVPN dhparam
edited tags
Nov
4
comment Pros/Cons to OpenVPN vs “VPN over OpenSSH”
Creating a tunnel over SSH (TCP) has some negative performance implications because of how TCP works. See: sites.inka.de/~W1011/devel/tcp-tcp.html
Oct
31
comment Is using self-signed certificates an option for this m2m scenario
How are you remotely managing these devices? I would be strongly tempted to manage them with puppet, which also happens to include a CA infrastructure and creates per-computer certs on every client. With that in place you simply need to trust your Puppet CA.
Oct
29
comment Clear EFS Cache at Set Interval
So, EFS works. However, he also wants the user to be prompted for their certificate password - Why? What type of attack does he think this would help in defending against? Making things pointlessly complex does not make the system more secure.
Sep
17
comment Download Torrents on University network without detection
I can do to prevent them from knowing? - Pay for your own internet connection.
Aug
19
comment Using + for email addresses to find out who is selling your data: is it naive or is it effective?
I don't use username+foo@gmail.com only for spam prevention. It is also very useful for building rules within my mailbox. It is very effective for automatically sorting and filtering legitimate messages.
Apr
14
awarded  Popular Question
Jan
30
answered Why does changing physical router not warn of possible man in the middle attack?
Nov
27
comment Can you securely wipe an SSD by filling the remaining space with bogus data?
SSDs do not make the entire internal capacity visible via the sata/usb interface. There is additional storage that is used when blocks fail by bad block mapping algorithms inside the drive. Since you cannot get to those blocks via the standard interface there is no way to over-write it simply using software. The assumption here is that a motivated attacker might have the skills to pop that drive open and directly access the hardware.
Nov
27
comment How much are 0-days worth?
Simple, they are worth as much as somebody will pay for them.
Sep
14
awarded  Student
Sep
14
asked OpenVPN dhparam
May
17
comment How to avoid scripts with hardcoded password?
Does a key-pair really change things though? You still have a set of credentials stored on the filesystem. You have only really changed the size/type of the credentials. Unless of course you are doing something fancy with a hardware security device where the private key isn't on the filesystem.
Apr
29
comment Why are Lengthy Password Stronger Than Complex?
If the attacker knows that a password is composed only of correctly spelled lower case English words, then you don't have to attack character by character. You attack word by word.
Apr
19
comment TrueCrypt External Multimedia Hard Drive
Truecrypt is volume level encryption. Anything within that truecrypt volume will be encrypted. Any files, filesystem meta-data, deleted files. Each and every block is encrypted. The only way to access is it is by decrypting it.
Apr
19
comment Could you attack a port without knowing what service was listening?
A large number of services will identify themselves in some way when you connect to the port. IE nc localhost 22 returns SSH-2.0-OpenSSH_5.9p1 Debian on my system.
Apr
13
comment Why should I use the VPN?
the term VPN covers a broad range of technologies, that can connect specific hosts, or whole networks together. The connection, may be encrypted, but can also be unencrypted. So what you use it for, depends on what you want to use it for. You configured to fit your requirements.
Apr
9
comment How can I protect my internet-connected devices from discovery by Shodan?
@Matt, Or at least don't use the stock firmware. The security problem is about the firmware.
Mar
27
comment How to insert custom packets into SSL handshake?
Are you aware of any proxies that will interact with this non-standard SSL server? For example can you get stunnel to connect to it?