831 reputation
2511
bio website cpickard.net
location London, United Kingdom
age 33
visits member for 3 years, 6 months
seen 7 hours ago

I'm a senior developer at Chase IT Services in London. We build great software for the financial services industry.


Jun
18
answered Can HSTS be defeated?
Jun
17
answered safe way to communicate IBAN connection
May
29
answered Are there other ways for a CA to have their certificates included in a browser?
May
29
awarded  Informed
May
28
awarded  Editor
May
28
revised Trace source and destination of an SMS message
added 596 characters in body
May
28
answered Trace source and destination of an SMS message
May
22
awarded  Commentator
May
22
awarded  Citizen Patrol
May
13
answered Can Malware Physically Damage A Hard Drive?
May
9
comment Can the recipient of my emails know my IP address?
More generally, this answer assumes neither the sender nor the recipient are running their own mail server.
Apr
1
answered Is it possible to create your own security updates on Ubuntu 12.04?
Apr
1
answered Full disk encryption for server running virtual machines
Apr
1
comment Are there actually any advantages to Android full-disk encryption?
+1, effective and fast wiping is a huge advantage. Also, it's very simple for non-technical users to effectively wipe their device before ebaying it, and requires no 3rd-party software. User friendly security is so much better because it will actually be used.
Mar
29
awarded  Great Question
Mar
28
awarded  Yearling
Mar
22
awarded  Famous Question
Mar
22
awarded  Yearling
Mar
21
comment How does the authentication in the new UK £1 coin work?
@Prinzhorn key management is a hard problem. Similar to leaking your secret cola recipe, your CA root certificate, or the plans on the eve of your invasion. There are some good known ways of reducing the risk, but ultimately you must trust some person or combination of people with the ability to make genuine coins.
Mar
21
comment How does the authentication in the new UK £1 coin work?
@Prinzhorn "Security though obscurity" is a term used to describe keeping the implementation secret. The equivalent implementation details here are far from secret - they are actually disclosed in a patent application, as describe in Adam Davis' answer. The secret composition of the additive is akin to a cryptographic hash function like SHA-1 - everyone can see the digest (the coin), verify it (matching the luminescent profile) and check the implementation (at least as far as divulged in the patent) but you cannot forge a matching coin without knowing the input.