101 reputation
2
bio website
location Taipei City, Taiwan
age
visits member for 2 years, 11 months
seen 11 hours ago

Dec
19
comment Would it be good secure programming practice to overwrite a “sensitive” variable before deleting it?
"If you're worried about physical attacks on the RAM, a bigger concern would be to ensure that the data is ovewritten in RAM and not just in the CPU cache." -- You can force memory barrier (at lowest level implemented as a CPU instruction) to enforce flushing CPU cache to RAM. If the programming language is higher level, one way to do it is to employ some memory sharing primitive like for example mutex (lock, erase, unlock) which use memory barriers as part of the implementation.
Dec
19
awarded  Informed
Aug
5
comment Is it safe to send clear usernames/passwords on a https connection to authenticate users?
9. Employ PFS to mitigate the risk of somebody (for example some evil government) stealing your private keys.
Feb
27
awarded  Supporter