Reputation
723
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
7 19
Impact
~34k people reached

Apr
30
comment USB TEMPEST attacks: viable range?
I notice someone has down-voted this question without explanation. To them or to anyone thinking of doing the same: please don't do that, it's not constructive. If you think the question is poor as it stands, please first suggest improvements in the comments. Thanks.
Apr
30
comment USB TEMPEST attacks: viable range?
@Polynomial, thanks. One reason for asking here is that it is possible that someone reading this has performed, or knows of, research into the practicality of it. I note your point about the ground and power planes, and I hope that if those do indeed have a substantial effect, then an answerer will explain the properties of the effect.
Apr
30
revised USB TEMPEST attacks: viable range?
added 41 characters in body
Apr
29
answered Testing attacks on the Signal messaging app
Apr
29
revised USB TEMPEST attacks: viable range?
USB versions
Apr
29
asked USB TEMPEST attacks: viable range?
Apr
21
comment What encryption and signature systems (don't?) allow for plausible deniability of the OP's key being used?
I recently asked (not very well!) a question that partly overlaps yours. My answer there gives an example of a protocol that might also have worked as an answer to your question.
Apr
21
revised Signature that can only be verified by author and recipient - without pre-shared key
added 882 characters in body
Apr
21
revised Signature that can only be verified by author and recipient - without pre-shared key
added 289 characters in body
Apr
21
revised Signature that can only be verified by author and recipient - without pre-shared key
rolled back to a previous revision
Apr
21
revised Signature that can only be verified by author and recipient - without pre-shared key
added 233 characters in body
Apr
21
revised Signature that can only be verified by author and recipient - without pre-shared key
added 69 characters in body
Apr
21
answered Signature that can only be verified by author and recipient - without pre-shared key
Apr
21
comment Signature that can only be verified by author and recipient - without pre-shared key
I appreciate your answer, not least because it showed that the question as I initially wrote it did not capture my intended meaning :s Sorry! I have updated the question for clarity, and upvoted your answer as thanks, even though it answers something slightly different than I intended!
Apr
21
revised Signature that can only be verified by author and recipient - without pre-shared key
Reduced ambiguity substantially
Apr
14
asked Signature that can only be verified by author and recipient - without pre-shared key
Feb
15
awarded  Popular Question
Jan
20
comment How is an HTTPS login secure when pages use HTTP?
@ThomasPornin, "It is highly plausible that caching benefits much more Ebay's infrastructures than Gmail's. However, and that's the tricky point, SSL prevents most of this caching." At least one CDN seems to have solved the latter problem, which would seem to imply eBay is, today, even less justified in using plain HTTP than it might have been a couple of years ago. Or is my understanding incorrect?
Jan
10
comment How to avoid identity theft at key signing parties?
@sebastiannielsen, also, if it were necessary in the case of identity theft, presumably it would be much less trouble over all to get your credit card company to cancel the credit card and issue a replacement with a new number, and then to update any necessary recurring bills, etc, than it would be to cancel your SSN and get the government to issue you with a new one, and then to update all the other records that depended on the original SSN.
Jan
9
comment Secure Configuration of Ciphers/MACs/Kex available in SSH
@TomLeek, does the SLOTH attack change this?