mnordhoff_

2 ms·

1. 1.▲
   by mnordhoff_ 13y ago

   Matthew Green wrote about GSM and LTE a few months ago: http://blog.cryptographyengineering.com/2013/05/a-few-though... TL;DR: GSM security is a joke. LTE is okay, except for two critical issues: One, an attacker
2. 2.▲
   by mnordhoff_ 13y ago

   IIRC, Poland was the EU country that was the focus of attention. Skimming Wikipedia's most definitely totally truthy article on the subject [1] (actually, it has a lot of citations, so it should be easy to verify), the UK's only a
3. 3.▲
   by mnordhoff_ 13y ago

   Public Service Announcement: "SHA1(password+salt)" is an extremely unsafe way to store passwords. Use PBKDF2, bcrypt or scrypt. Edit (T+7 minutes): Rewritten to not be a jerk.
4. 4.▲
   by mnordhoff_ 13y ago

   Nginx has an equivalent preference, ssl_prefer_server_ciphers on. (Scroll down a bit on evmar's link.)