572 reputation
516
bio website
location Cambridge, United Kingdom
age 95
visits member for 3 years, 1 month
seen yesterday

Interested in semantics, communication, history & philosophy of science, and the - uh - universe...

N.B. I harbour some misgivings about Stack Overflow and the rest of the Stack Exchange system, for reasons overlapping those articulated here by Michael Richter and here* by Benjamin Mako Hill.

*Stack Exchange has further to go than GitHub in this respect.


May
9
answered How do some sites (e.g. online banks) only ask for specific characters from a password without storing it as plaintext?
May
9
awarded  Custodian
May
9
reviewed No Action Needed New Gmail login system—going against conventional wisdom?
May
6
revised GPU powered Password cracking machine - buy metal or cloud?
fixed typos
May
6
suggested approved edit on GPU powered Password cracking machine - buy metal or cloud?
Apr
21
comment Two-factor port-knocking via SMS (TXT)
An excellent answer to my Q.2. Upvoted; thanks!
Apr
21
accepted Two-factor port-knocking via SMS (TXT)
Jan
27
revised Can malware physically damage a hard drive?
Removed unnecessary capitalisation from title
Jan
27
suggested approved edit on Can malware physically damage a hard drive?
Jan
23
awarded  Notable Question
Jan
12
awarded  Excavator
Jan
12
revised Can malware physically damage a hard drive?
Fixed typos.
Jan
12
suggested approved edit on Can malware physically damage a hard drive?
Dec
21
comment How to avoid identity theft at key signing parties?
@BobBrown, at some KSPs, at least some participants are mutual strangers, hence the need for ID. In these cases, your a) is false; but you may choose to trust that the ID documents shown by a stranger are accurate & that the stranger is genuinely in control of a given PGP key. That is very different from trusting the stranger not to engage in identity theft against you.
Dec
21
comment How to avoid identity theft at key signing parties?
@BobBrown I'm sorry you've reached that conclusion, because it's mistaken. My question and comments were in earnest. I felt it was better to give constructive feedback on the answers that I found unhelpful than to simply downvote them or to say/do nothing. If you think I was wrong to do this, please explain how I could have conducted myself better.
Dec
21
accepted How to avoid identity theft at key signing parties?
Dec
21
comment How to avoid identity theft at key signing parties?
Thank you! It had not occurred to me that a notary public might be useful for reducing conventional identity theft risks at KSPs.
Dec
21
comment How to avoid identity theft at key signing parties?
@cremefraiche, I've re-read it several times and no, really, it doesn't. Hint: just because something is not required doesn't imply it is never permitted.
Dec
21
comment How to avoid identity theft at key signing parties?
@cremefraiche, you are mistaken to say I trust no-one enough to let them verify I am who I say I am. I would be grateful for answers to my original question, rather than speculation or hyperbole.
Dec
21
comment How to avoid identity theft at key signing parties?
@cremefraiche fair enough, but it is still odd that this does not seem to be much of a concern to other people, especially to people sufficiently concerned about security that they are taking active steps (i.e. participating in a KSP) to counter cryptographic identity theft, which I believe is much rarer than conventional identity theft and which might in many people's cases have less severe consequences. I don't know why this isn't more remarked upon. I feel like there's a cognitive bias at play.