902 reputation
614
bio website paralint.com
location Montreal, Canada
age
visits member for 3 years, 2 months
seen Apr 9 at 15:53

I like smart people who get things done. I do my best everyday to be one of them.

I code mostly in C++, Python, Java and... whatever comes my way. I also like to understand a problem down to its roots, a process also known as debugging.

LinkedIn and Careers profiles.


Nov
6
answered Attacking an office printer?
Aug
21
awarded  Constituent
Aug
16
awarded  Caucus
Jul
30
comment Can my company see what HTTPS sites I went to?
Yes, indeed ! You would have to compare fingerprint and such wich is very very unlikely to happen.
Jun
26
accepted Can a biometric device serve as a user based entropy source?
Jun
22
comment Can a biometric device serve as a user based entropy source?
I like your comment, make it an answer !
Jun
22
comment Can a biometric device serve as a user based entropy source?
Right, entropy might not be the best word to describe this. What I meant is that if were to compare all keys for all users, I would see that they are totally random, i.e. there is no way to predict one even if you know all the others.
Jun
21
asked Can a biometric device serve as a user based entropy source?
Jun
5
comment Is it possible to use same certificate on several machines by exporting it?
Very true. I would add that the "non-exportable" flag of any certificate is just that, a flag. If it is stored in a software container, getting the key is always feasible.
May
22
comment Two-factor authentication w/certificate and username & password?
Right. Never store the password on the device. And to be considered two factor, a certificate must be store in a tamper proof device. But my interpretation is as good as the next. It depends on your threat model and tolerance to risk.
May
18
answered Two-factor authentication w/certificate and username & password?
May
14
revised MAC vs Encryption
Nitpciking
May
13
comment MAC vs Encryption
Yes, MD5 is weak, but that's not the point. We did not mention algorithm either. And what is a MAC other than an encrypted hash, like I proposed ? The message, along with the hash is encrypted. +Thanks for the link, I will use it next time I will give my introduction to cryptography class.
May
11
comment MAC vs Encryption
Yes, I added a conclusion to sum it up.
May
11
revised MAC vs Encryption
Added conclusion
May
11
revised MAC vs Encryption
Typos
May
11
answered MAC vs Encryption
May
8
comment Physical computer security, how to disable USB ports when the computer is 'locked'?
In that scenario, you should also worry about FireWire, which has DMA support
Apr
25
awarded  Commentator
Apr
25
comment TLS Renegotiation Indication Extension vulnerability
Right, the MITM can't decrypt, only inject. I've edited my answer for that point and take the -1, hoping that my edited answer is now correct, if not as well laid out as the others.