693 reputation
139
bio website
location Moscow, Russia
age
visits member for 1 year, 9 months
seen yesterday

Jul
3
revised RSA vs. DSA for SSH authentication keys
better intro listing available options
Apr
25
awarded  Nice Answer
Mar
27
revised Are there any systems out there that use a one-time pad?
+ link to Pidgin
Mar
27
comment Are there any systems out there that use a one-time pad?
@tylerl ain't encryption all about making all cleartexts equally probable?
Mar
27
comment Are there any systems out there that use a one-time pad?
But doesn't any kind of encryption provide no more secrecy than the secrecy of the key?
Mar
27
answered Are there any systems out there that use a one-time pad?
Feb
7
revised RSA vs. DSA for SSH authentication keys
grammar
Feb
7
revised RSA vs. DSA for SSH authentication keys
update to reflect the info from the comments
Feb
7
revised RSA vs. DSA for SSH authentication keys
OpenSSH 6.5+ now has Ed25519 key type, update information accordingly
Feb
6
awarded  Necromancer
Jan
30
answered Secure way to transfer public/secret key to second computer
Dec
27
comment SSH key-type, rsa, dsa, ecdsa, are there easy answers for which to choose when?
ECDSA has the same weakness as DSA in this respect. And in OpenSSH it's doubly fishy because OpenSSH only implements NIST curves that are suspected to be backdoored by the NSA. More info here: security.stackexchange.com/a/46781/15087
Dec
27
revised RSA vs. DSA for SSH authentication keys
even more formatting
Dec
10
answered RSA vs. DSA for SSH authentication keys
Dec
10
comment SSH : Remote Host Identification Changed
MitM attacks can be done not only in local networks via ARP poisoning as you describe. TOR outproxies and proxy servers are other common places for MitM attacks. Finally, there could be all sorts of nasty stuff going on on the network gear between you and the intended machine, because it's rarely patched with security updates and in general nobody really bothers pentesting it.
Oct
17
awarded  Yearling
Sep
14
comment How to securely hash passwords?
This question made it to the blog: security.blogoverflow.com/2013/09/about-secure-password-hashing
Aug
8
revised Whats the best way to make my internet traffic anonymous?
don't bother setting up a VM by yourself, use a specialized distro
Aug
8
revised Whats the best way to make my internet traffic anonymous?
added link to DNS leak test, updated dnscrypt website link
Aug
6
awarded  Populist