Viewing profile — uid65534

Ah yes, I too remember when COMODO was ripped out of browsers in 2011 when it came to light they gave sign-anything rights to a bunch of resellers, one of whom was hacked. And then…

I feel this every day I talk with cloud-brained coworkers. I manage an infrastructure with tens of thousands of VMs and everyone is obsessed with auto scaling and clustering and ev…

Having the tool actively prevent classes of errors is a worthwhile endeavor, but I do agree it gets overly focused on alone when several other _massive_ classes of vulnerabilities …

The only way this stuff trickles down to the masses is people that know what they are doing forcing it on them through their products. Very, very few 'engineers' actually go out an…

I personally push for IPv6-only internal networks whenever possible, and have deployed several such designs in datacenters. Unfortunately, a lot of applications are building on pla…

IME when people start using self signed certificates they trust anything that is presented, with no pinning. That means that so long as you MITM it with something with it's own sel…