744 reputation
519
bio website
location
age
visits member for 2 years, 9 months
seen yesterday

2d
comment Prevent padding oracle attack on key exchange process
Cross-posts: stackoverflow.com/q/30328940/1591669 and crypto.stackexchange.com/q/25768/8638
Apr
24
revised Why do HTTPS requests include the host name in clear text?
added tag.
Apr
24
suggested approved edit on Why do HTTPS requests include the host name in clear text?
Apr
22
comment Why don't we reward users who choose strong passwords?
Related new SE site: Gamification
Apr
10
revised What are NoScript surrogates and should one disable them for more privacy in browsing?
added tag.
Apr
10
suggested approved edit on What are NoScript surrogates and should one disable them for more privacy in browsing?
Apr
10
revised FTP hacked, planted file
added tag.
Apr
10
suggested approved edit on FTP hacked, planted file
Mar
28
comment Could see image of previous session after restarting and switching OS
The German IT news magazine heise online reports that someone created a proof of concept for (what seems to me) this issue: The Palinopsia Bug (also on Hacker News).
Mar
12
revised Why don't PGP keyservers enforce double-opt-in?
added tags
Mar
12
suggested approved edit on Why don't PGP keyservers enforce double-opt-in?
Feb
28
comment Shop saves credit card data from guest orders
To clarify, I can enter any shipping address. Today I ordered something to a shipping address never used before. I just entered my "known" email address, entered a new shipping address (different name, different city) and could select my "known" credit card.
Feb
27
asked Shop saves credit card data from guest orders
Feb
27
awarded  Popular Question
Feb
17
awarded  Notable Question
Feb
12
revised How can I hide my logged in sessions from other websites?
added tag "web-browser"
Feb
12
suggested approved edit on How can I hide my logged in sessions from other websites?
Feb
12
revised Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
added tag, removed thanks
Feb
12
suggested approved edit on Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
Jan
29
comment Verify digital signature without key public key in signature
I guess there is no need for installing pgpgpg unless you want to use the same commands that are used in the proprietary PGP.