viveksec

8 ms·

1. 1.▲
   by viveksec 13y ago

   > Hmmm, no Perfect Forward Secrecy on RC4-SHA... Actually dont see how you can have PFS on DHE either if one of the endpoints doesnt co-operate. You can simply dump the master keys and provide those to the decrypting app.
2. 2.▲
   by viveksec 13y ago

   Google serves up static content uses DHE. We've noticed only Google sites using DSA certs with ECDHE. A report on what we found http://trisul.org/blog/dsa-xdrill/post.html
3. 3.▲
   by viveksec 14y ago

   I work in deep packet analytics and have interacted with several telcos and vendors. If you are developing a packet analytics or metrics product the temptation to tap into your production traffic, if only for validating your product is too
4. 4.▲
   by viveksec 14y ago

   I think the OP is balancing the economic costs of firing with the psychological advantages to be had by chucking him and clearing his mind. If the guy wasnt "close to indispensible", he'd likely be gone by now. One way out could be to bri
5. 5.▲
   by viveksec 14y ago

   I had one too in India when I was 13. The ZX Spectrum 48K. Loved it to death. Magazines were a bit hard to come by here, but I managed to get my hands on one book, I think it was called "Machine code with ZXSpectrum". I remember a program c
6. 6.▲
   by viveksec 15y ago

   This sounds airtight. The analogy with the physical safe is completely destroyed by True Crypt's hidden partitions. Any lawyers want to comment on this ?
7. 7.▲
   by viveksec 15y ago

   Puzzle solving ability is a reliable indicator only if the candidate hasnt specifically prepared for them. Many Indian IT companies in the mid-late 90's conducted exams with difficult programming puzzles in them. This was great for a while,
8. 8.▲
   by viveksec 15y ago

   Great point. I wonder how the Freemium model works for something like Splunk. Do free users constitute a completely different universe or there is significant conversion of free to paying users ?
9. 9.▲
   by viveksec 15y ago

   I am Indian and I wish we would lighten up. Things aren't pure as milk here either. There are quite a few Indian companies which ask their employees to use Western names while creating online content such as on support forums, twitter accou
10. 10.▲
    by viveksec 15y ago

    How else can you pull this off unless you design to image to be as close to organic results as possible ? But I wonder what happens if the site owner decides to change the styles, the image would then foolishly look fake. The rating stars h
11. 11.▲
    by viveksec 15y ago

    I highly recommend Twitter bootstrap combined with the generator Stasis (stasis.me) for people rolling out new static websites. The bootstrap elements are particularly well suited for documentation pages - see http://trisul.org