The DMZ

afternoon folks

Scott Pack

If you're using ESX, then you can expand the drive

Morning, @Rory

2 hours later…

1:21 PM

Q: Vote for your QoTW #10

For QOTW #10, scheduled for publishing to the Security Stack Exchange Blog on 16 Sept, please post your topics as Answers, and vote for your favorite question from the whole Security Stackexchange site. Please post any question that you feel is worthy and your reasons. Try not to promote your ow...

any takers?

Iszi

1:48 PM

@ScottPack VirtualBox

2:20 PM

Hello people

afternoon @ThomasPornin

How have things gone for the last 10 days or so ?

I was away in another continent

@ThomasPornin Well, as expected your rep has still increased faster than anybody else's ;)

@ThomasPornin vacation?

@JeffFerland I wish.

This ^

2:22 PM

It was pure work

@JeffFerland Speaking of which, what is happening today ?

Q: Is it safe to use the same secret key for HMAC that I use as a passphrase for AES CBC key derivation?

I am working on a cross platform (JS/iOS/Android) list manager application that persists data through a REST API and I want to ensure that any textual data is properly encrypted on the client side so that there's no way to decrypt the data on server side and in the unfortunate case that the datab...

encryption hash

Otherwise... it's a Monday and I'm doing depressing data work that is interspersed with security reading and thinking about changing the Firefox SSL api.

2:40 PM

cricket

3 hours later…

5:31 PM

@ThomasPornin People? I though I was a dog...

@thisjosh On the Internet nobody knows you're a dog -- not even you.

Oh, well then thats good. Self-anonymity, easier to achieve on the internet..

In the world of randomness, I tested out Convergence in Firefox beta on 3 platforms and told Moxie he ought to update the flag for version 7. Same weekend, one of the others in my local group patched in some functionality for certificate checking with Google. Totally random.

I think I'm going to try to get him and a few other locals together for a hack-a-thon on exposing an API for SSL in Firefox and maybe implementing DNSSEC for verifying SSL keys.

Anyone heard anything about Google's Account Chooser?

nealmcb

6:23 PM

@thisjosh I just watched the 8-min and 4-min videos. They don't specify very clearly what problems they're trying to solve, and certainly don't talk much about the security of the UI changes.

Thanks neil.

nealmcb

E.g. it seems that they'll show everyone on a shared home computer or kiosk the pictures of everyone else that uses the same machine during login on each site. A bit scary

Though not clear whether it is much worse than current schemes