520 reputation
1513
bio website karol.piczak.com
location Warsaw, Poland
age 27
visits member for 3 years, 5 months
seen Apr 14 at 14:38

One-liner: Finance/data tinkerer by day, hobbyist composer by night. Academically interested in AI/ML and machine perception (currently working on a PhD in sound classification with machine audition techniques).


Educational background: Master of Finance, now pursuing a PhD in Computer Science (audio data analysis, signal processing, music recommender systems, MIR etc.).

Professional interests:

  • Quantitative finance
  • Financial markets

Academic interests:

  • Machine perception, audio data analysis, music recommender systems, MIR, signal processing and identification, audio mining
  • Artificial intelligence, machine learning, data mining, statistical analysis

Personal interests:

  • Music composition and sound design
  • Foreign languages
  • Fantasy books

My business card: karol.piczak.com

My web presence: karol.dvl.pl


Jun
2
comment How reliable is a write protection switch on a USB flash drive?
So, a bit less specific version - would a read-only switch work as a reliable fail-safe mechanism when a write was not intended? Be it from malicious tampering with the live image or more probably just due to accidental erasing/overwriting when left mounted on another system.
Jun
2
comment How reliable is a write protection switch on a USB flash drive?
Yes, in general this would help. But to be honest, when I look at the question now, I think my attack vector as described in its current state is purely theoretical and too specific. I also doubt any kind of attack would be that targeted. I should have described it as pertaining to the avoidance of unwanted data corruption.
Jun
2
comment How reliable is a write protection switch on a USB flash drive?
That's in fact my assumption I'm trying to confirm. As to SD cards, I've added an excerpt from SD specifications showing that mechanical switches are explicitly host based. Only internal card protection would work, but it's not that common (optional to the standard). But I suppose it's this kind of internal solution that is used on flash drives, however I couldn't find anything precise about it.
May
17
comment Is using a public-key for logging in to SSH any better than saving a password?
+1 Thanks for a nice writeup. Indeed I've missed the fact of a challenge-response model in my answer.
May
2
comment time to crack file-encryption password - more than just iteration
Pertaining to your edit: do you mean some cryptoanalysis? You say file which is believed to be encrypted - some kind of steganography or unknown cipher? This would be going off on a tangent to the original question.
May
2
comment Encrypting a fixed format message with commands and transmitting over the internet
It seems as OAuth should suit your needs. Or just stick with @Jeff's suggestion.
May
2
comment Encrypting a fixed format message with commands and transmitting over the internet
I'm not sure I understand correctly. What are site A clients? I think what you want is to keep secret key at site A, create the request and sign it on site A, transmit to site B (be it directly or by user form interaction) and verify the signature upon reception on site B. It would help if you provided some more background on your situation by editing your question (how does site A interact with site B, what's the user part in this etc.).
Mar
9
comment Wireless keyboard sniffing risk
Luckily, in my case it's only personal/SOHO use, not military. :-) So out of sheer paranoia I could use a wired backup keyboard and sleep tight. But it got me thinking more as a general question - for instance, would you use wireless in a corporate environment?
Mar
9
comment Wireless keyboard sniffing risk
I'd rather avoid building a bunker. ;-) But thanks for a nice paper. As to the problem - I thought more about things like virtual keyboard input.