997 reputation
615
bio website paralint.com
location Montreal, Canada
age
visits member for 3 years, 9 months
seen Oct 8 at 1:08

I like smart people who get things done. I do my best everyday to be one of them.

I code mostly in C++, Python, Java and... whatever comes my way. I also like to understand a problem down to its roots, a process also known as debugging.

LinkedIn and Careers profiles.


May
22
comment Two-factor authentication w/certificate and username & password?
Right. Never store the password on the device. And to be considered two factor, a certificate must be store in a tamper proof device. But my interpretation is as good as the next. It depends on your threat model and tolerance to risk.
May
18
answered Two-factor authentication w/certificate and username & password?
May
14
revised MAC vs Encryption
Nitpciking
May
13
comment MAC vs Encryption
Yes, MD5 is weak, but that's not the point. We did not mention algorithm either. And what is a MAC other than an encrypted hash, like I proposed ? The message, along with the hash is encrypted. +Thanks for the link, I will use it next time I will give my introduction to cryptography class.
May
11
comment MAC vs Encryption
Yes, I added a conclusion to sum it up.
May
11
revised MAC vs Encryption
Added conclusion
May
11
revised MAC vs Encryption
Typos
May
11
answered MAC vs Encryption
May
8
comment Physical computer security, how to disable USB ports when the computer is 'locked'?
In that scenario, you should also worry about FireWire, which has DMA support
Apr
25
awarded  Commentator
Apr
25
comment TLS Renegotiation Indication Extension vulnerability
Right, the MITM can't decrypt, only inject. I've edited my answer for that point and take the -1, hoping that my edited answer is now correct, if not as well laid out as the others.
Apr
25
revised TLS Renegotiation Indication Extension vulnerability
Got the last part wrong
Apr
24
answered TLS Renegotiation Indication Extension vulnerability
Jan
26
awarded  Yearling
Oct
7
awarded  Enlightened
Oct
7
awarded  Nice Answer
Aug
24
awarded  Autobiographer
Aug
5
comment Slow client key exchange in TLS?
Please provide more information. It looks like OpenSSL. What version is it, can you reproduce that behavior with openssl s_client ? Do you have a public URL we can try ?
Aug
4
comment How can I mitigate the threat that DPAPick poses to my DPAPI protected data?
I agree with @Casebash : if you have the password, access the data using CryptUnprotectData in a custom data extraction tool if needed. It is nice to have DPAPI reversed engineered, though.
Aug
4
answered Slow client key exchange in TLS?