116 reputation
6
bio website
location
age
visits member for 1 year, 9 months
seen Jun 30 at 15:24

Apr
14
comment How to use the Internet while Heartbleed is being fixed?
@Jacob Could you clarify what you meant by "There have been claims that it is likely that private keys wouldn't be in memory, but at the same time there have been claims of successful key extraction."? It would seem to me that without dedicated hardware the private keys MUST be in memory. Maybe not the vulnerable memory, but memory all the same. Also, since you've crossed out the "At this point it is uncertain which side is correct." part, you might want to clarify that you mean that it is in fact vulnerable.
Apr
14
comment How to use the Internet while Heartbleed is being fixed?
@Sirex As far as I can tell no site that I log into using two-factor auth has invalidated the cookies on my machine. This is of course a failure on their part, but my point is, at the moment two-factor auth is not a savior. An attacker could quite easily intercept the cookies and use them on their own requests. Furthermore, since there is no way to know whether anyone exploited this bug (even for the system administrators) the ONLY safe assumption is that it was exploited. I know for instance that chase.com was still vulnerable as of Wednesday morning. Unlikely the attackers missed that one.
Apr
14
comment How to use the Internet while Heartbleed is being fixed?
I am disappointed I don't have the reputation to downvote this post. For one thing, most sites (amazon, chase, etc) basically don't use forward security, which means everything up to the first use of the cert is compromised. Also, I'm not aware of these major vulnerabilities that you claim are running rampant. I can not think of the last vulnerability that didn't require at least the ability to log into the computer in question and was installed on pretty much every non-windows computer with a "secure" connection. If I didn't know better I'd flag this post for its horrific misinformation.
Apr
10
awarded  Student
Mar
28
comment How does USB bandwidth work? Will multiple devices share the 480mbps limit for USB 2.0?
+1 for the data integrity point.
Mar
22
answered Why are the number of cores in a processor normally even
Mar
22
awarded  Citizen Patrol
Mar
22
awarded  Informed
Mar
9
awarded  Tumbleweed
Mar
2
asked Xfce terminal resize not sent across ssh
Oct
12
awarded  Supporter
Oct
9
awarded  Teacher
Oct
8
answered Common syntax to specific stdout as “output file”
Sep
28
answered Is there any way to do 'software raid' without losing data?I