Reputation
9,289
Top tag
Next privilege 10,000 Rep.
Access moderator tools
Badges
2 16 59
Newest
 Good Answer
Impact
~511k people reached

Jul
31
reviewed Approve How do hacking groups register domains remaining anonymous?
Jul
22
reviewed Approve RSA vs. DSA for SSH authentication keys
Jul
20
comment Is “the oft-cited XKCD scheme […] no longer good advice”?
TL;DR use a password manager?
Jul
20
reviewed Approve How can I make a read-only filesystem read/write?
Jul
20
reviewed Approve How can I make a read-only filesystem read/write?
Jul
19
comment What defines a programming language as useful for hacking?
Bash is a scripting language, but what you are describing here is more stringing tools together than actual scripting.
Jul
19
revised Tor, PGP and Tor Entrance Nodes
added 29 characters in body
Jul
19
revised Is it theoretically possible to decrypt a file without the key/password?
added 587 characters in body
Jul
19
answered Is it theoretically possible to decrypt a file without the key/password?
Jul
19
comment How can my employer be a man-in-the-middle when I connect to Gmail?
"certificate 028CA85E6765" Yeah I thought the same. Trouble is, Google uses dozens of certificates. Why they go through the trouble of having many certificates at the same time even if most of them are nowhere near expiring is a mystery to me, but they do. I think the best thing to do is compare fingerprints from the CA.
Jul
19
comment How can my employer be a man-in-the-middle when I connect to Gmail?
Exactly. So eventually the question is: who sold you your private laptop and why are you running a preinstalled Windows containing who knows what? Somewhere you have a root of trust :) (And talking about trust roots, did anyone mention CAs? :D)
Jul
19
revised Tor, PGP and Tor Entrance Nodes
Changed example from Martin/StackExchange to Message/alice.example.net to reflect the question
Jul
19
answered Tor, PGP and Tor Entrance Nodes
Jul
17
comment Better techniques than url parameter encryption
Something sounds very wrong when you say RBAC is not an option.
Jul
16
reviewed Reject Why does Firefox split HTTPS request?
Jul
8
reviewed Reject XSS with input in onclick attribute
Jul
2
awarded  Curious
Jul
1
reviewed Approve Why do ATMs accept any PIN?
Jun
30
reviewed Approve opportunistic-encryption tag wiki
Jun
30
reviewed Approve opportunistic-encryption tag wiki excerpt