Reputation
580
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
2 6 13
Impact
~57k people reached

  • 0 posts edited
  • 0 helpful flags
  • 46 votes cast
Jun
1
asked How reliable is a write protection switch on a USB flash drive?
May
17
comment Is using a public-key for logging in to SSH any better than saving a password?
+1 Thanks for a nice writeup. Indeed I've missed the fact of a challenge-response model in my answer.
May
17
revised Is using a public-key for logging in to SSH any better than saving a password?
I've missed the part about private keys
May
17
answered How to protect from new Javascript Injection technique that doesn't use eval()?
May
17
answered Is using a public-key for logging in to SSH any better than saving a password?
May
5
answered What “hacking” competitions/challenges exist?
May
2
comment time to crack file-encryption password - more than just iteration
Pertaining to your edit: do you mean some cryptoanalysis? You say file which is believed to be encrypted - some kind of steganography or unknown cipher? This would be going off on a tangent to the original question.
May
2
comment Encrypting a fixed format message with commands and transmitting over the internet
It seems as OAuth should suit your needs. Or just stick with @Jeff's suggestion.
May
2
answered time to crack file-encryption password - more than just iteration
May
2
comment Encrypting a fixed format message with commands and transmitting over the internet
I'm not sure I understand correctly. What are site A clients? I think what you want is to keep secret key at site A, create the request and sign it on site A, transmit to site B (be it directly or by user form interaction) and verify the signature upon reception on site B. It would help if you provided some more background on your situation by editing your question (how does site A interact with site B, what's the user part in this etc.).
May
2
awarded  Teacher
May
2
answered Encrypting a fixed format message with commands and transmitting over the internet
Mar
13
awarded  Scholar
Mar
13
accepted Wireless keyboard sniffing risk
Mar
10
awarded  Editor
Mar
10
revised Wireless keyboard sniffing risk
Provided threat model
Mar
9
awarded  Student
Mar
9
comment Wireless keyboard sniffing risk
Luckily, in my case it's only personal/SOHO use, not military. :-) So out of sheer paranoia I could use a wired backup keyboard and sleep tight. But it got me thinking more as a general question - for instance, would you use wireless in a corporate environment?
Mar
9
comment Wireless keyboard sniffing risk
I'd rather avoid building a bunker. ;-) But thanks for a nice paper. As to the problem - I thought more about things like virtual keyboard input.
Mar
9
asked Wireless keyboard sniffing risk