Reputation
289
Top tag
Next privilege 300 Rep.
Create new tags
Badges
1 11
Newest
 Curious
Impact
~7k people reached

Feb
11
comment Does a valid code signing certificate mean that an installer has not been tampered with in transit?
This answer seems to speak to TLS communications. The question is about signed files. Can you explain how this applies to the question?
Feb
11
asked Does a valid code signing certificate mean that an installer has not been tampered with in transit?
Feb
7
awarded  Popular Question
Nov
27
comment Secure Boot on Microsoft Surface Pro 3 (or modern PCs)?
This question is related to your final question.
Nov
16
revised Accessing iPhone data without passcode - how difficult?
added 22 characters in body
Nov
16
awarded  Teacher
Nov
14
comment Accessing iPhone data without passcode - how difficult?
Interesting. It looks like a high-entropy key is derived algorithmically from, in part, the passcode. However, this is done in a separate chip containing and using a unique ID. This arrangement complicates performing an offline brute-force attack and limits the online attempt rate. See my answer for more details.
Nov
14
answered Accessing iPhone data without passcode - how difficult?
Nov
14
comment Accessing iPhone data without passcode - how difficult?
The second bullet surmises that the key can be algorithmically derived from the passcode. It seems plausible that instead, while the device is locked, a high-entropy key is stored only in a "trusted" area of hardware (a la bitlocker PIN+TPM), and that key is unlocked with the passcode. The premise in that case is that the key is much more difficult to exfiltrate from the "trusted" area of hardware than brute-forcing the 4-digit password after dumping the plain-old flash.
Mar
11
revised Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?
fixed title
Mar
11
comment Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?
Also, do you have a source supporting the general availability of RdRand to Hyper-V guests? Ostensibly, not all VMWare guests have access to RdRand. It seems like the same might be true for Hyper-V.
Mar
11
comment Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?
Do you have a source for your point (4)? The link you provided does not support it.
Mar
10
awarded  Nice Question
Feb
22
awarded  Yearling
Feb
14
asked Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?
Apr
10
awarded  Excavator
Apr
10
revised How does a client authenticate the domain controller
fixed malformed numbered list; spelling/grammar fixes
Apr
10
suggested approved edit on How does a client authenticate the domain controller
Mar
27
accepted When taking ownership of a TPM in Windows 7, how is the SRK derived from the password?
Mar
17
accepted Is there a reliable way to simulate “Evil Maid Attack” boot path tampering when using bitlocker?