markgamache

5 ms·

1.
by markgamache 15y ago
This article is 100% wrong. The IV is not a secret, must be know for decryption. In-fact counter mode simply picks a starting IV and increments. Allowing the attacker to manipulate the IV or reuse of an IV can be problematic, but a guess
2.
The IT Revolution is Coming Soon, I Hope(markgamache.blogspot.com)
1 points by markgamache 15y ago|0 comments
3.
The Next Big Thing in Information Security(markgamache.blogspot.com)
1 points by markgamache 15y ago|0 comments
4.
by markgamache 16y ago
Totally irresponsible journalism. This is not all or .NET or even a tiny fraction. It is one control that will be rapidly patched. This allows the end user to decrypt their own "encrypted" cookie, not an attacker. At best, if the web app
5.
Some Things That IT Hates About Executives(markgamache.blogspot.com)
2 points by markgamache 16y ago|0 comments
6.
How I Learned to Stop Hating Java and Start Loving s_client(markgamache.blogspot.com)
2 points by markgamache 17y ago|0 comments
7.
by markgamache 17y ago
No SSL. Sign me up!
8.
Ask HN: How do you use SSH?(surveymonkey.com)
3 points by markgamache 17y ago|1 comments
9.
Looking Inside the Citrix Netscaler and Client Access Gateway Ent SSL Payload(markgamache.blogspot.com)
2 points by markgamache 17y ago|0 comments
10.
Crypto is easy, key management is hard. A guided example through a Fail.(markgamache.blogspot.com)
1 points by markgamache 17y ago|0 comments
11.
by markgamache 17y ago
AT no longer allows running as local system. HTTPAnalyzer is great for HTTPS, but not pure SSL, such as LDAPS, in the example.
12.
Sniffing the Unsniffable on Windows(markgamache.blogspot.com)
26 points by markgamache 17y ago|6 comments
13.
Why Software Certificates Aren't a Second Authentication Factor(markgamache.blogspot.com)
1 points by markgamache 17y ago|0 comments