« first day (174 days earlier)      last day (5004 days later) » 

Iszi
Iszi
01:44
It seems this one has been double-posted. How exactly does it relate to IT Security specifically?
0
Q: How to secure identity after someone dies?

matt wilkieHow would you go about securing the online identity(ies) of someone as best you can after they've died, when they haven't put anything in place ahead of time for this event? Assume we don't know how many identities or services they've used, but at the very least includes 3 email accounts with d...

identity
Errr... Nevermind. I think I see it now.
nealmcb
nealmcb
not a double post in my eyes
Iszi
Iszi
They can be easily combined to one topic - the two are closely enough related.
nealmcb
nealmcb
02:17
One is forensics / cracking, the other is backup.
 
2 hours later…
Iszi
Iszi
04:32
Y'know, it'd be nice if I could tell Windows to always apply certain types of updates. For example, I don't really need to be prompted to update Windows Defender or the MSRT.
 
9 hours later…
Iszi
Iszi
13:58
Is this really something that should (potentially) be left open for 12 Joe Citizens to decide? How many people on the street are really going to get the concept of two-factor authentication?
krebsonsecurity.com/2011/06/…
Too localized?
0
Q: Are there any hardware encryption solutions for my notebook?

LanceBaynesI have a HP 6510b notebook. Are there any solutions for hardware encryption? I mean I don't want to use software encryption like LUKS, but I don't want that that if my notebook gets stolen the thiefs could get my data stored on it. Are there any methods, e.g.: a password prompt shows up when ...

disk-encryption
Jeff Ferland
Jeff Ferland
14:28
@Iszi Those twelve are supposed to decide it based upon expert testimony
Damn... somebody should really write an amicus curiae on that.
Also, I know Sari.
Iszi
Iszi
@JeffFerland Sorry... who?
@JeffFerland Seriously, try explaining two-factor authentication to some of your relatives and then try explaining why the defendant's scheme is not two-factor authentication. See how easily that goes.
Jeff Ferland
Jeff Ferland
14:49
@Iszi I just had that discussion with a partner in the firm here.
"Patco’s security expert, Sari Green of Portland, Me"
Iszi
Iszi
15:32
@JeffFerland Oh. Hadn't really caught the names of the people in the case.
Scott Pack
Scott Pack
16:20
Here you are, @Iszi. I don't have time to write up something cogent.
0
Q: Any advantage to securing WiFi with a PSK, other than to keep out unauthorized

Sonny OrdellAs I understand WiFi with a PSK, such as WPA(2)-PSK or WEP, anyone on the same network can decrypt anyone elses packets because everybody has the same key. In which case, if you are not going to implement TKIP and want to have a free and open network, is there any benefit to implementing a PSK o...

wifi wireless
Iszi
Iszi
17:18
@ScottPack Oooh, bad info there regarding WPA2. I don't have time either, though.
Then again, that may be right and I just don't understand Hole 192 properly.
In any case, I've got other stuff to do. Will try to follow up later.
 
1 hour later…
Thomas Pornin
Thomas Pornin
18:24
This one may degenerate in a flamewar, I think:
0
Q: Open Source vs Closed Source Systems

blundersMy understanding is that it is the common belief that open source systems are more secure than closed source systems. Reasons for taking either approach, or combination of them, include: cultural norms, financial, legal positioning, national security, etc. - all of which in some way relate to t...

disclosure opensource closedsource
C. Ross
C. Ross
@ThomasPornin may?
Thomas Pornin
Thomas Pornin
@CRoss My faith in Mankind is limitless.
Jeff Ferland
Jeff Ferland
Oh, how I wish I could star those 4 lines as one.
@Iszi It's Hole 196... and I suppose I can add that to my answer.
Iszi
Iszi
18:55
@JeffFerland Bah, you're right. Been looking at private IPs too much today.
@JeffFerland You work with wireless security a good bit?
Jeff Ferland
Jeff Ferland
19:07
@Iszi I figured it was a power-of-2 in your head thing. 1100000 and all... much cleaner than 1100100 :)
It was just one of my favorite things. WiFi came out in my high school years, and I took great joy in wardriving.
AviD
AviD
19:33
@nealmcb oops, sorry... I'm still catching up, so I'm cleaning up a pile of q's all at once... shouldnt be so bad from now on
though you can always click the "active" link on the right of the question, to jump to the most recent update
@Iszi you can make it be your default....? what do you mean, per user?
@ThomasPornin @CRoss, do you think I should preemptively close as S&A?
actually the q is phrased pretty well, not very subjective at all. But that wont stop subjective answers...
Thomas Pornin
Thomas Pornin
@AviD I think you should wait a bit: the author made several edits in order to ensure a clear question. That kind of effort should be rewarded.
AviD
AviD
@ThomasPornin I agree. Also, I think it can be a very good discussion, just not sure it's likely.
though so far, this site at least has been relatively (with only a couple of exceptions) religious-war free.
@Iszi omigooneess. thats just.... clueless.
reminds me of an episode of boston legal, where a non-HIPAA-compliant healthcare provider led to an abusive husband to murder his escaped wife... the technical discussion there was mostly non-sensical. But still a good closing argument ;)
Thomas Pornin
Thomas Pornin
@AviD I will give it a try.
AviD
AviD
@ThomasPornin either way, we'll need to keep an eye on it (@RoryAlsop, @GrahamLee... ), and shut down any fights as soon as they happen.
if ya see anything, ping one of us here?
"See something, say something" ;)
so, @ThomasPornin, you hitting 10K next week... Tuesday? Wednesday?
have a party planned? ;)
Thomas Pornin
Thomas Pornin
@AviD If tomorrow and Friday look like yesterday or today, I should hit 10k by the week-end.
No party planned, but I will make sure to have quality time with my oversized ego.
AviD
AviD
19:45
@ThomasPornin :). but usually weekends are slower, so I didnt want to put too much pressure on you to perform ;)
@JeffFerland hmm... My dad's a lawyer (ex- state asst.DA), so maybe I'll collaborate with him, and do the country a favor... I'm also well familiar with the RSA system they used.
actually, when I did a security review on it, I pointed out exactly this type of bypass, amongst others...
e.g. public knowledge and available information.
but.... bizness is bizness...
Jeff Ferland
Jeff Ferland
20:40
@AviD I'm going to start writing a brief on it tonight. If you feel like a little Google doc collaboration...
 
1 hour later…
Iszi
Iszi
21:44
@AviD I mean, I wish the site automatically defaulted to "newest", or allowed individual users to choose their default start page. Where can I make it my default?
Iszi
Iszi
22:36
Y'know, on second look that Wi-Fi question seems duplicate-ish...
Iszi
Iszi
22:50
Okay, I think I understand Hole 196 better after reading that article @JeffFerland linked in his answer. It's not that knowledge of the PSK directly enables decryption of all packets, but it does facilitate spoofing the AP, and therefore a MITM can result in Eve receiving other users' traffic in a readable form.
Feeds
Feeds
23:16
Stack Overflow Blog: SE Podcast #07
Posted by Alex Miller on June 8th, 2011

Jeff and Joel are joined by Sam Saffron (aka Waffles), our only Australian developer at Stack Exchange! 

Join us next week when our guest is Marco Arment, the creator of Instapaper and the former lead developer of Tumblr.  We’ll also be live streaming again, so tune in to http://www.livestream.com/stackexchange starting at 3:30pm – you can also join the live chat at http://chat.stackexchange.com/rooms/512.

Name (required)

Mail (will not be published) (required)

Website

 …

Jeff Ferland
Jeff Ferland
@Iszi Having the shared key allows decryption of all packets in a session that you see the initial four way handshake of
Iszi
Iszi
23:54
@JeffFerland - Per the AirTight article, "The malicious insider does not gain access to the private keys (PTKs) of other authorized Wi-Fi users in the WPA2 network". So, how would having the shared key allow the attacker to decrypt packets on their own? The only method of receiving readable traffic mentioned there, is via MITM.
In the MITM attack, the AP is doing the crypto functions - decrypting the victims' traffic and re-encrypting it with Eve's key.

« first day (174 days earlier)      last day (5004 days later) »