Reputation
473
Top tag
Next privilege 500 Rep.
Access review queues
Badges
2 12
Newest
 Yearling
Impact
~31k people reached

  • 0 posts edited
  • 1 helpful flag
  • 114 votes cast
Jan
19
answered How should I securely type a password in front of a lot of people?
Jan
18
comment Fake users in database for compromise detection
It seems many major sites already do this with real users, by using some heuristics to predict whether an account was compromised. I travel a lot, and when I log in from a different country than last time, may sites I use go into panic mode and require additional confirmation through e-mail or phone that it's really me who just successfully logged in.
Jan
14
comment Why do some internet banks force logout on back button?
This reminds me of an annoying bug on a major bank's website: when I intend to transfer money, they provide a last chance to view all the information before clinking the final commitment button. I reviewed it, found that I made a typo in the description field, clicked on the back button inside the website (so not the browser's back button), made my correction, then did this once again.... and was greeted by a message saying that I entered my SMS code wrong 3 times in a row so my account was blocked.
Dec
23
comment How to store passwords written on a physical notebook?
I have the advantage of having a relatively obscure native language, and on top of that I know and old script for it which fell out of use during the Middle Ages, and is known by significantly less than 1% of native speakers. So unless someone shares the same heritage and is a huge history nerd, they won't even recognize what the script and language are. Of course, if it was a targeted attack (if I was a celebrity, or an important CEO or political leader) they would figure it out, but otherwise it's a great solution against losing the notebook and especially casual glances by random people.
Dec
2
comment Is obfuscation worth it
"the attacker will always win" - if the attacker has unlimited time and money, then yes. Otherwise, it comes down to the question whether whatever the attacker might gain is worth more than the required effort or not.
Oct
23
awarded  Yearling
Oct
22
awarded  Citizen Patrol
Oct
22
asked If two programs on the same machine communicate through TCP, can it be seen from the outside?
Oct
10
revised How to prevent a prophecy from becoming self-fulfilling or self-defeating
added 2 characters in body
Oct
10
comment How to prevent a prophecy from becoming self-fulfilling or self-defeating
@Philipp : if something is unsuitable for one task, doesn't necessarily mean it's unsuitable for a completely different task. MD5 is still perfect for checking against non-malicious corruption of a file due to errors in transmission, for example. And I can't imagine how someone can write an on-topic text file with no gibberish in it, to have a pre-defined MD5 hash.
Oct
10
awarded  Scholar
Oct
10
accepted Is there a protocol for securely trading information between possibly uncooperating agents?
Oct
10
asked How to prevent a prophecy from becoming self-fulfilling or self-defeating
Aug
11
comment Preventing Ethernet over power
+1 for the last paragraph. It's probably much cheaper to just monitor the mains for traffic, than change the whole power network so that the high-frequency components are suppressed.
Jun
15
awarded  Commentator
Jun
15
comment Considerations for long-term key storage (paper backup, media for vault storage)?
"up to 100 years" sounds always strange to me. Technically, they guarantee that it will not last longer than 100 years. If it fails after a month, it's still true that it lasted "up to 100 years". Just like the "up to 50% discount" in a store where most discounts are below 10%.
Apr
27
comment How to publish scanned documents anonymously?
@Richard : the problem with OCR and publishing it as plain text is that it would be perceived of having less authenticity (maybe he just made it all up and just typed whatever he wanted). Publishing the officially-looking document itself as an image makes it more credible.
Jan
24
awarded  Student
Nov
24
comment Is there a protocol for securely trading information between possibly uncooperating agents?
I think I've understood it, and I agree with you that it's impossible to make it completely secure. However, there are a lot of problems which don't have an optimal solution, but suboptimal solutions are still used. A standard bicycle lock is no burden at all against a very skilled thief, but it's still being used, not to deter the world's best bicycle thief, but to deter most random passers-by. I was hoping such a service exists, which doesn't guarantee 100% security but can be useful for cases where the information is not that important that people will go out of their way to hack the system
Nov
24
comment Is there a protocol for securely trading information between possibly uncooperating agents?
The links are very interesting, but they are also very theoretical. If I had to implement a system which automatically does this, I could do it without any problems. What I'm searching for is an already existing, practical implementation, this is why I asked the question here and not at crypto.