31,878 reputation
23379
bio website
location Rensselaer, NY
age 30
visits member for 2 years, 7 months
seen Mar 23 at 13:49

Feb
22
comment Create certificate without private key with OpenSSL
Can't you use the smart card to sign the CSR? Simply produce the unsigned CSR and then submit it to the card for signing. Signing is typically a feature of a smart card since without being able to sign, it can't prove to anything that it has the private key.
Feb
15
comment Why don't mobile operators blacklist stolen phones using their IMEI?
Fair enough, but a permanent fix still isn't a concern for a thief. They just want to get the cash. They are almost never the end user, because they know having stolen property is a bad idea.
Feb
15
comment Why don't mobile operators blacklist stolen phones using their IMEI?
I'm not sure if it is possible to clone with a jtag or similar device against the hardware directly, but a thief doesn't care if it works long term. They care if they can pawn it off on someone before it breaks.
Feb
14
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
@chao it is worth pointing out that using crypto all the time doesn't hide that you sent a message, it just hides if it is interesting. Also, otp isn't limited to the Internet so it could be used through covert channels that are harder to track to you.
Feb
14
comment Why would an attacker try to guess random email usernames on a small domain?
@skaperen Actually there is zero chance because they try the same series of passwords and are blocked before they ever get to a valid password since the initial guesses don't meet complexity requirements.
Feb
14
awarded  Good Answer
Feb
14
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
@Hopelessn00b - Ok, re-reading your comment from earlier, I think I get what you are saying about OTP not maintaining perfect information security (sorry, it is 2am here). It does leak that you may have sent a message (but you may not have). But that in no way aids in breaking the cryptography itself. My statement is very clearly about being "impossible to break", not "impossible to make any observation about your action". There is no information leaked which is useful in breaking the cryptographic protection of the message.
Feb
12
awarded  Nice Answer
Feb
11
answered Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
Jan
8
reviewed Close Ruby OpenSSL vs Linux openssl
Jan
8
reviewed Close How do I avoid drawing the ire of the Department of Homeland Security when prepping to run my RPG?
Jan
8
reviewed Close Writing keylogger and viruses in python
Jan
6
answered How to secure Epson Beamer?
Jan
4
comment Two-factor authentication Without Mobile Phone
@tepples that is why account name and login should not be the same if you can avoid it.
Dec
30
reviewed Close sqlmap - Dump multiple columns at once?
Dec
30
reviewed Close DNS poisoned cache does not have any effect
Dec
30
answered Does it make sense to isolate each web service user on his own servers?
Dec
22
reviewed Close Is Tox really secure?
Dec
22
reviewed Reject Is there any disadvantage in using OpenNIC for DNS resolution?
Dec
19
answered How are computers identified across networks?