Ayrx

Operating systems have their own trust stores, many programs rely on them. Some programs like Firefox for example distribute their own trust stores.

@deostroll It Depends™.

@user334283 It's a network security term as well: en.wikipedia.org/wiki/DMZ_(computing)

@Gilles lol, way to make everything about you.

@Cripto Burn it with fire?

Shuddup @AviD

Ah hah. :)

Not sure how I can help you there. I can't see anything about your account info except for the handle.

Blegh.

Hope you got that.

Also, that answer was a direct copy paste of a comment. :P

You should come hang out on Slack. :P

@Polynomial o/

I believe it's 2^32 files for NTFS?

@AviD Well, they don't call it inodes but NTFS still uses a very similar concept.

All filesystems have a max inode size, you can bust that with that decent scale.

@O'Niel Database mappings for the sole reason that it's much easier to scale.

CISSP is a test, like all tests they are looking for the expected answer, no the right one.

@WhiteWinterWolf You are overthinking this.

My feelings have been bruised. I'm going to take a shower and rethink my life choices.

FEED ME!

I'll do it for a beer an hour.

English I don't even.

I'm just kidding. :P Go with #1.

@user5348fh8y5 No, Link 2 is most secure.

@AviD He did say by default insecure and 0 privacy so I assume Android. :P

@ack__ The correct answer is disable debug mode before pushing to production. Everything else is just a waste of time.

@ack__ Is some sort of debug mode enabled?

@Xander In which case the correct but expensive answer is probably get a HSM.

You are still vulnerable to anything running on the system that can read the passwords from memory but at that point you are fucked regardless.

@NEO Look at how password managers like Keepass do it. Encrypt the passwords at rest and ask for a password on application startup to decrypt it.

@RоryMcCune More a reference manual than a book tbh. :P

@Mathematics My goto Windows book is Windows Internals.

@Lilienthal Ah. You can do that with just about any programming language, including Python.

@Lilienthal What do you mean test a SSL handshake?

That is bare bones.

@deostroll github.com/trevp/tlslite is fairly nice

Google it...?

@user2284570 See tools.ietf.org/html/rfc5280#section-4.1.2.5

Saying "Big enough DDoS wipes any service" is true in theory but there really is practical limits. :P

There are a lot of active defences one can employ to mitigate a DDoS, especially when you are running on the scale of FB or Google.

@RoryAlsop DDoSing a target for a short period of time is one thing, keeping up the effectiveness of the DDoS is another.

@RоryMcCune Hipster yes... useful... not really...

@RоryMcCune It's ruby though so you'll want to rewrite it in a real language. ;)

@SEJPM letsencrypt.org/2015/11/09/why-90-days.html

@SEJPM Automatically rotating certificates is a solved problem.

But that's deviating from the original question.

OCSP has been proven to be the wrong answer. Short lived certificates is the correct one.

@SEJPM Because OCSP has been proven to work reliably right? /sarcasm

I'd never recommend adding a third party to the equation unless you are targeting the browser market.