15,209 reputation
1159124
bio website security.stackexchange.com
location Florida
age 33
visits member for 4 years, 7 months
seen 7 hours ago

This is a canary message, to be removed in the case of my death. If you're reading this, I haven't died yet.

Then again, how would you know? I mean, how could I possibly delete this message after my own demise?

You know what? Just go ahead and assume I'm dead. Any posts appearing to be made by me are from an impostor who's stolen my identity post-mortem, and only further prove the fact that I am dead. After all, why would I even think to post a canary message if I was expecting to be alive to remove it anyway?

In any case, I'm still not the droid you're looking for.


1d
reviewed Close Diffie Hellman parameters still calculating after 24 hours
1d
reviewed Close Can data be tampered with after expert clones a drive?
1d
comment Can data be tampered with after expert clones a drive?
At this point, the person under investigation has zero assurance (and no means to assure) that the data has not been manipulated since they were not provided the hashes. However, a court of justice will more than likely accept the testimony of a sworn civil servant who says the hashes provided for evidence were the same that were calculated at the time the drives were initially collected. What legal recourse there is, to address the fact that nobody (without an eidetic memory, and without bias favoring investigators) can corroborate this, will probably depend on your jurisdiction.
Jul
28
awarded  Enlightened
Jul
28
awarded  Nice Answer
Jul
27
reviewed Close Javascript web-based key derivation
Jul
27
reviewed Close Failure analysis to avoid locking permanently online accounts
Jul
27
reviewed Close How to verify Signature Value using cert file in C#?
Jul
27
reviewed Close Where to search for vulnerabilities in a WordPress theme?
Jul
27
reviewed Close Is it possible to reuse a OTP Token with another security provider?
Jul
24
reviewed Close Apply GPO to Group and Computers
Jul
24
reviewed Close How to deal with SMS spam?
Jul
24
reviewed Close Hacker using my wifi connection to try to log on?
Jul
24
reviewed Close Failure to capture any packets on wlan0 in monitor mode
Jul
24
awarded  Constituent
Jul
23
reviewed Close How should I report a security vulnerability?
Jul
23
reviewed Close Risks when connecting Public WLAN networks
Jul
23
reviewed Close Is it possible to exploit an image field in which I can upload any file?
Jul
23
comment Why Social Security Numbers are still used for human authentication in USA?
@raz The last 4 of the SSN might not be the only piece of information asked for in many cases, but in most it's the "hardest" piece of information for an attacker to get. And the point of this question is that even it really isn't all that hard to get. Never mind the fact that if you can get the SSN, or even just the last 4, most of the other information that companies will ask about for authentication will be right alongside it.
Jul
23
comment Why Social Security Numbers are still used for human authentication in USA?
Last 4 of SSN, mother's maiden name, first pet's name, street you grew up on, first car... The list goes on. And the list of reasons/excuses for using those may even be just as long or longer. Most of that probably equates to "we've always done it that way" - though that doesn't necessarily mean there ever was solid logic for starting to do it that way in the first place. In any case, the scope of the subject is extremely wide and there's practically no chance of getting a single, authoritative answer on the issue.