akaiser

6 ms·

1.
by akaiser 2y ago
Eludes me why they didn't have device-certificate-based auth for their Enterprise WiFi in addition to the username+password. Basically comes for free with AD and NPS.
2.
by akaiser 3y ago
A wallet app like Exodus is not for keeping BTC, it's for transacting with it. The wallet file is for keeping BTC, and whether you print it on laminated paper or copy it to multiple USB sticks that you distribute in multiple places (yo
3.
by akaiser 3y ago
Then again, an attacker can read the decryption key from RAM (freeze and remove the modules, then dump the memory on another system) and decrypt the disk offline. So, data on a stolen laptop which has an unprotected TPM (no PIN to boot) ca
4.
by akaiser 3y ago
Technically there is no requirement for a mobile app or data. Through PayByPhone you can pay for parking using SMS, by calling (IVR), a web app or mobile apps. But as the author points out, it's hard for the user to know about all the
5.
by akaiser 3y ago
Yes, try https://m.paybyphone.com
6.
by akaiser 9y ago
The article describes the fact that the CM Browser ignores certificate errors and shows websites as though they were properly secured. Having an actual proper setup (with a trusted CA etc.) wouldn't help here, because a MITM attack wou
7.
by akaiser 9y ago
Why not just pretend you do TLS and simply don't show MITM attacks to your users like the (also somehow Chinese) CM Browser does? https://medium.com/@dEad0r/cm-browser-insecurity-can-chinese...
8.
by akaiser 11y ago
The final goal this probably had is already achieved (a lot better) by properly configured TLS. I think this only prevents having the password in clear text at some specific point in time on the servers and (accidential) logging. OK, maybe
9.
by akaiser 13y ago
You should have started with the NCHAR(2000) example. Choosing INT over BIGINT is really something that, as you calculated yourself, wouldn't change the fate of a project. Especially not in our 64 bit world ;) The point you make about
10.
by akaiser 14y ago
Thanks for pointing to your low-latency-switching strategies, was an interesting read! Although I see how it is great for a high availability strategy as a side-effect, I wonder why you did not want to make use of location information on th
11.
by akaiser 14y ago
Let's wait for someone to find a vulnerability based on that bug then. Ideas, anyone?