3,216 reputation
423
bio website goodenoughsecurity.blogspot.c…
location Jerusalem, Israel
age 41
visits member for 2 years
seen Mar 6 at 7:06

Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.

IT security (especially password security) is a hobby.


Nov
7
reviewed Reviewed Passwords In Securing Network Devices
Nov
7
revised Encryption in an embeddded system
Added solution for if you assume the firmware is not modifiable
Nov
7
comment Encryption in an embeddded system
If you assume that the attacker cannot modify the firmware then all you need to do is sign the file using RSA with PKCS#1 padding (which is good enough for your needs). sourceforge.net/projects/tplockbox has Delphi code for this; OpenSSL has C code. Since the information in the file (prices) is not secret there's no reason to encrypt the file.
Nov
7
revised Encryption in an embeddded system
Typo and wording
Nov
7
answered Encryption in an embeddded system
Nov
5
reviewed Reviewed How do you log in from an unsecured computer?
Nov
5
reviewed Reviewed Attacks surrounding /etc/hosts/
Nov
5
awarded  Custodian
Nov
5
reviewed Reviewed How do you log in from an unsecured computer?
Nov
5
reviewed Reviewed Which ports are potential security risks for nmap?
Nov
4
comment Should Stack Exchange be more obscure in its systems' structure?
As @RoryMcCune wrote in his response to security.stackexchange.com/questions/2430/…, obscurity shouldn't be relied on for security but there are situations where obscurity is good as an extra layer on an otherwise properly secured system. Obscurity isn't bad in itself - it's bad only if it is used to hide the fact that the system is otherwise not secure.
Nov
4
comment What is SHA-3 and why did we change it?
@PaŭloEbermann Sure.
Nov
4
answered When using symmetric key encryption, do we need to sign?
Nov
4
answered Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?
Nov
3
awarded  Nice Answer
Nov
1
revised Practices for storing username/password in Web applications
typo fix
Nov
1
reviewed Reviewed Different Security Issues Depending on OS?
Nov
1
answered Practices for storing username/password in Web applications
Oct
31
comment How can I encrypt a file with .NET and have the same file size of the original file?
@Thomas - is this clearer now?
Oct
31
revised How can I encrypt a file with .NET and have the same file size of the original file?
Added explanation as to the background of the solution