BlueRaja - Danny Pflughoeft
Reputation
1,138
Top tag
Next privilege 2,000 Rep.
Edit questions and answers
Badges
8 14
Newest
 Yearling
Impact
~55k people reached

  • 0 posts edited
  • 0 helpful flags
  • 159 votes cast
7h
comment Could keystroke timing improve security on a password?
coursera.com, a site with free/paid college-level courses, does exactly this before each exam to ensure the correct person is taking the exam. Passwords can be shared, key-timings cannot (not easily, anyways)
Apr
19
comment Are cloud storage services a good strategy to protect against ransomware attacks?
I made this a few years ago: Comparison of Cloud-Storage Backup Solutions. I'm sure some of it is out-of-date (especially the prices) but it should still be useful. I ended up going with SpiderOak.
Mar
10
comment Is C a good choice for security-related software any longer?
@phyrfox: No, it's like saying a saw is inherently more dangerous than a screwdriver.... which is true.
Feb
23
awarded  Yearling
Feb
22
comment If “you can never trust the client”, then why do companies such as Valve rely solely on client-side verification?
@DoktorJ: The main issue with streaming games is latency, not bandwidth. You can stream HD with only 5mbps (Netflix's highest 1080p stream is only 8mbps), so even "only" 3mbps is fine. The real issue is latency, which is bounded by physical limits. The only solution is for a company to spatially distribute their servers.
Feb
22
comment If “you can never trust the client”, then why do companies such as Valve rely solely on client-side verification?
Wow the answers for the question are just terrible. This answer is the closest answer to correct (servers do do server-side verification), but the reasoning is completely made up, it has nothing to do with doing "an enormous amount of calculations". If between two packets the user claims to have moved twice as fast as usual, is that because they're speed-hacking, or because the first packet arrived extremely slowly? And how could you detect wall-hacks or aimbots serverside, even with unlimited computing power?
Feb
22
comment If “you can never trust the client”, then why do companies such as Valve rely solely on client-side verification?
@sebastiannielsen: Of course you could still cheat with server-side rendering, but things like aim-hacks would have to do visual analysis instead of just reading player-positions from memory. Where there's a will there's a way.
Feb
4
answered Why are self signed certificates not trusted and is there a way to make them trusted?
Dec
9
comment Can any password hash ever be secure?
Interesting tidbit: If you had a computer which used the minimum amount of energy physically possible to flip a single bit, it would take you more energy than exists in the entire sun to build a counter that counts from 0 to 2^256. So we are not going to have computers that can brute-force a hash of that magnitude anytime soon.
Dec
3
awarded  Good Answer
Dec
3
reviewed Reject Why is Steam so insistent on security?
Dec
2
awarded  Nice Answer
Dec
2
awarded  Yearling
Dec
2
revised Why is Steam so insistent on security?
added 4 characters in body
Dec
1
comment Why is Steam so insistent on security?
@Bobson: Because many accounts have credit-card and Paypal info saved. Also they can have Steam-wallet funds.
Dec
1
answered Why is Steam so insistent on security?
Sep
9
comment Can RAM retain data after removal?
possible duplicate of Recover the prior contents of RAM from a turned-off PC?
Sep
2
awarded  Student
Aug
31
awarded  Scholar
Aug
31
accepted How does LastPass know that Microsoft.com uses the password for Live.com?