LamonteCristo

New York, NY

val-id.com

Age: 38

The following message is ROT26 encrypted:

Check out my startup at Val-ID, an offline identity company that puts you in control

I'm not looking for a job. I'm going to change the world. The only question is, who wants to do it with me?

14h
answered Why does Windows have a place to store intermediate SSL certificates?
15h
comment When do shared disks "leak" data to other VMs, and how is that mitigated?
@raz Any shared disk based data ( opposed to RAM)
16h
asked When do shared disks "leak" data to other VMs, and how is that mitigated?
16h
answered How much can I trust the "factory restore/reset" on a(n) (potentially compromised) android?
17h
awarded Popular Question
1d
comment Choose your own exponents in RSA?
See Impacts of not using exponent of 65537 on crypto
1d
awarded Notable Question
1d
comment Why doesn't Facebook use HSTS
note to mod - someone voted to close, but I think your answers and links are interesting and can be applied to many other sites. Might be a topic for META but can't post now.
1d
awarded Popular Question
2d
awarded Notable Question
2d
comment Do we need to logout of webapps?
Does this advice still apply to pressing the back button/history to re-authenicate to a SAML/federated cookie? Would be interesting to see the scenarios that affect the various caching directives... it's probably documented in Google's (old?) Browser Security Handbook
2d
comment Why do you need to close your browser window after logging out of a website?
Since not every browser acts the same, and plugins and local security software (or proxies) may alter this behavior, I think the advice is a good way to ensure a consistent security posture. Here is an example of why this is needed, because some apps/proxies may cause prior session/SAML auth to be cached. Some SAML providers (facebook, and older ADFS in non cluster mode) are affected security.stackexchange.com/q/8404/396
2d
asked How do I get the Tinder touch?
2d
comment Should security documentation referencing "state sponsored exploits" be revised to include large corporations also?
That fits what I'm looking for: organized crime. Thanks
2d
revised What reputable site should I download Putty from?
added 133 characters in body
2d
awarded Yearling
2d
awarded Yearling
2d
comment Should security documentation referencing "state sponsored exploits" be revised to include large corporations also?
True, but this is security related documentation...
2d
comment Should security documentation referencing "state sponsored exploits" be revised to include large corporations also?
I wouldn't doubt that in some countries, a corporation can influence a state to act as a proxy. They already place the individuals they want in power by funding their campaigns
2d
awarded Popular Question
1 2 3 4 5