John Greene
  • Member for 7 years, 2 months
  • Last seen more than a week ago
Which host key algorithm is best to use for SSH?
19 votes

Since the algorithms are in a state of flux, I find that using an ssh-audit tool (available on Github) (here's a more recent fork) to be extremely useful. Example output of a current but secured SSH ...

View answer
What makes Adobe formats so vulnerable?
4 votes

Because Shockwave/Flash used a intermediate bytecode that gets generated from ActionScript, it is the code generator and the library found in the flash_player plugin that has extremely poor security ...

View answer
Data Encryption by Application vs Data Encryption in Database
3 votes

Adding encryption on its database per-field or per-group-Of-field basis seems like the best trade off provided that an index field(s) is also created alongside with each field being encrypted. You ...

View answer
What is the difference between PEM format to DSA/RSA/ECC? (Might I confuse PEM with these)?
1 votes

A simpler answer is that PEM is a meta-wrapper to the cryptographic information to help application parse it. And those three-letter acronyms stated in the original question are used to create the ...

View answer
Privacy implications of Intel CPU's secret 3G communication (Anti Theft 3.0)
1 votes

First thing, first: You'll want to invest in yet another Ethernet NIC adapter for your fancy Intel motherboard in which to replace your onboard Ethernet device with. Most Ethernet NIC do not have ...

View answer
Is it possible to create DNSSEC chain of trust for local root zone
0 votes

There is a bash script to generate the ISC Bind9 named.conf file for a working standalone closed-network (13) Root Server(s) that fully-supports DNSSEC. Works with ISC Bind9 v9.16.24-RH and v9.17.21 ...

View answer