11,786 reputation
743103
bio website security.stackexchange.com
location Florida
age 32
visits member for 3 years, 7 months
seen 19 hours ago

I'm not the droid you're looking for.


19h
revised Printer SSL certificates
added 154 characters in body
19h
answered Printer SSL certificates
20h
reviewed Close Sandbox environment for “php malware” analysis
1d
reviewed Close Are input fields that don’t have name=“” sent via the browser
1d
reviewed Close Are newly-generated recovery passwords sent to me via email hashed?
1d
reviewed Close How to build the End-to-End GPG extension for Chrome
1d
reviewed Close Does Kismac work on MacOSX 10.9+?
Aug
14
revised Are newly-generated recovery passwords sent to me via email hashed?
added 71 characters in body
Aug
11
reviewed Close Is there any virus that can cause physical damage
Aug
11
reviewed Close Track mail sender from Mesh network
Aug
1
comment Is dd-wrt generally more secure than manufacturer's firmware?
Similarly, leaving the OEM firmware in place and never updating will be no better than doing the same for DD-WRT. Some OEMs are adding auto-update features to their routers these days, as I'm sure DD-WRT probably is also. I think the real difference that needs to be looked at is longevity of support for updates. How does DD-WRT rate on this, in comparison to OEM support for firmware on the same routers? Another thing to consider, as you've alluded, is how do they generally compare in responsiveness to vulnerability alerts?
Jul
31
reviewed Close Is there a secret-sharing public-key-encryption-based service?
Jul
31
comment Is there a secret-sharing public-key-encryption-based service?
Depends on what you mean by "trustworthy". There's plenty of systems/services out there. But unless you're generating and controlling access to the keys yourself, you cannot be confident that the system/service itself doesn't have access to your data - then you need to decide how much you trust them to not abuse that access, or to not be hacked such that an attacker can abuse it.
Jul
29
reviewed Close Is it possible to ping a LAN card through its MAC address?
Jul
29
comment Websites Forcing Weak Password Standards (Updated)
You forgot the option of just switching to a different provider for the services offered by the site. Not always an option, certainly, but one that should at least be considered where possible.
Jul
29
reviewed Close Spying cellphones
Jul
29
comment Does clicking lead to DoS attack?
Nobody needs to write a program to click on your links. They just need to write a program that duplicates the requests that are generated when those links are clicked. This can be done much faster than anything that has to simulate UI interaction, and doesn't even need to wait on your site to process one request before the next is sent.
Jul
29
comment A folder lock/encryption program that can do this?
Any software that's doing encryption properly will prevent access to the protected data regardless of what happens to the Operating System - so long as the data is not currently unlocked by an authorized user.
Jul
29
reviewed Close A folder lock/encryption program that can do this?
Jul
26
comment Can sites which check your password as you type pose a security risk?
@sapi Oh, sorry. I misread. Are you certain it's actually checking for correct username/password pair? Have you tried typing a wrong password which otherwise meets the site's complexity requirements? For example, try adding another character to your password at the end or changing one of the characters in your password to a different character of the same type (e.g.: if it's a lowercase letter, change to a different lowercase letter). Does it still give you a check-mark then? What about the right password but wrong (but correctly formatted) username?