I think it makes sense to offer signup via OpenId, but not require it, even for ecommerce websites.
The reason for this, is that tech-savvy users (still the core userbase for openid) can decide whether to take that risk, or not.
The sites that I would not recommend using OpenId, are either hig...
@thisjosh Indeed. The key is Scott's note that "the assumption that it was a closed system that only trusted parties could access." So they didn't complicate the protocols with security, and many of the mechanisms we use now were not even known outside the spook community.
I remember hearing a story one that an America crypto crusader had an algorithm tatood on his body and dared the authroities to prevent him from leaving the country as an export
@thisjosh I wore the infamous RSA Perl T-Shirt (cypherspace.org/rsa) thru Heathrow back when it was theoretically a crime. No one paid any attention....
I am confused about to use of DES. Triple DES, RSA and AES algorithms, I think I couldn't get more idea about them, so I am not able to think which algo would be better.
My Task :
I am developing an application who sends an encrypted String to PHP server, and PHP server decrypt it, and sends re...
I am reading OpenID in depth. I found a bug / hack. I think this is not good thing in openid.
let me explain what I did :-
clear all history of my Firefox.
Login into Stackoveflow with Google
signout from stackoveflow and Google.
check history and copy google OpenID return (like http://stackov...
This week in Las Vegas is Christmas for security. In listening to four talks today, I’ve come to conclude that the community suffers from a real lack of discussion about interacting with management, mandatory access controls need to be enhanced to focus on applications, the SSL system is irreparably broken and DNSSEC really should replace [...]
For QOTW #5, scheduled for publishing to the Security Stack Exchange Blog on 12 August, please post as Answers, and vote for your favorite question from the whole Security Stackexchange site.
The question doesn't have to be recent, just discussion-worthy.
Please post any question that you feel...
So, I have my Glassfish server is listening on port 8080.
However, I want to have my requests at port 80 while hiding 8080,
so that people think my server really runs at 80.
How can I do it with iptables? I have tried the following rule:
iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j...
Web servers like httpd don't run as root any more to bind to port 80, you use a superserver like xinetd or launchd to bind, then drop to normal user to launch the server.
The "low-numbered ports require root" thing was a bit of a gentlemen's agreement that worked well in the early days of *nix networking, but is pretty meaningless now.
@jmendeth not to worry. You may find SU or SO folks more current on the actual implementation, whereas over here we are more concerned with sorting the security aspects
i got a site taken down yesterday from their VPS host due to theft of intellectual property and for hosting a malicious script that intercepts passwords as plaintext...
and they recovered quickly...
while still using said intellectual property
looks through the lawbooks federal lawsuits, here I come. :P
@RoryAlsop you can test the justify here : pastebin.com/VCh0yPD8 I hope that's working with all browser. Not sure the GM_addStyle is not a GreaseMonkey special action.
@Mvy Thanks for the alert. I approved the comment on wiping a disk. And I noticed that evidently I didn't submit my very similar comment yesterday. Sigh.
I work in a growing, family owned business. The company has 300 employees and has landed some big clients who require major policy changes in order to give us their continued business. Among those changes is the development and implementation of a security policy.
I work the IT help desk and sin...
Is anyone else just a little freaked out about what could happen if this... http://www.extremetech.com/extreme/92054-black-hat-hacker-details-wireless-attack-on-insulin-pumps got put together with this... https://www.computerworld.com/s/article/9218866/Researchers_show_off_homemade_spy_drone_at_Black_Hat ?
Posted by Kyle Brandt (@kylembrandt) on August 4th, 2011
This Saturday, August 6th starting at 3pm EDT (19:00 UTC) we will be taking our sites offline for maintenance. We are aiming to keep the downtime to about thirty minutes to an hour. Should we need to extend this window I will post updates on this post.
During this window we are going to be patching our database servers. We are also migrating our servers to a new AD domain so we have everything under a consistent naming structure.
I think it makes sense to offer signup via OpenId, but not require it, even for ecommerce websites.
The reason for this, is that tech-savvy users (still the core userbase for openid) can decide whether to take that risk, or not.
The sites that I would not recommend using OpenId, are either hig...
I am confused about to use of DES. Triple DES, RSA and AES algorithms, I think I couldn't get more idea about them, so I am not able to think which algo would be better.
My Task :
I am developing an application who sends an encrypted String to PHP server, and PHP server decrypt it, and sends re...
I am reading OpenID in depth. I found a bug / hack. I think this is not good thing in openid.
let me explain what I did :-
clear all history of my Firefox.
Login into Stackoveflow with Google
signout from stackoveflow and Google.
check history and copy google OpenID return (like http://stackov...
For QOTW #5, scheduled for publishing to the Security Stack Exchange Blog on 12 August, please post as Answers, and vote for your favorite question from the whole Security Stackexchange site.
The question doesn't have to be recent, just discussion-worthy.
Please post any question that you feel...
So, I have my Glassfish server is listening on port 8080.
However, I want to have my requests at port 80 while hiding 8080,
so that people think my server really runs at 80.
How can I do it with iptables? I have tried the following rule:
iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j...
