977 reputation
818
bio website
location
age
visits member for 3 years, 7 months
seen Sep 28 at 16:57

Apr
19
suggested suggested edit on Is there anything standing in the way of email encryption going mainstream?
Feb
28
awarded  Yearling
Feb
6
comment Sharing passwords through email can be considered insecure?
plaintextoffenders.com/about says "sending the password via email ... is bad." That seems to directly contradict "For most webs and services it is ok to send you a clear password ... to your e-mail." Did you maybe intend to put a "not" somewhere in that sentence?
Feb
6
comment Sharing passwords through email can be considered insecure?
Have you heard of plaintextoffenders.com/about ?
Feb
3
comment Does server RAM count as storage for PCI Compliance?
+1 agree. Maybe it would be better if the credit card data went directly from the customer to a PCI-compliant server directly to the payment processor (as with Stripe, Square, Chargify, etc.), rather than making a detour through some other server.
Jan
24
comment Where is the salt on the OpenSSL AES encryption?
related: "Is there a standard for OpenSSL-interoperable AES encryption?"
Jan
13
comment Increase the security of an already stored password hash
related: Convert old and busted password encryption to something sensible
Nov
23
awarded  Notable Question
Aug
30
awarded  Popular Question
Aug
5
comment Is using a public-key for logging in to SSH any better than saving a password?
If "not using a passphrase isn't smart", then why does the OpenSSL documentation specifically say that "it may be a good thing to avoid protecting it with a password" ? (Should I ask this as an independent question?)
Jun
18
revised public key distribution from a central server
edited tags
Jun
18
awarded  Nice Question
May
13
answered Computing entropy for a passphrase ( minimal word length … )
May
13
comment how safe is the 256 bit encryption used in bank transactions
@GuySirton: While many people would be surprised if it turns out that factoring is NP-hard, is there any proof that factoring is definitely not NP-hard?
May
13
awarded  Organizer
May
13
revised How can I block an IP, if I'm getting many http requests in a second?
capitalize "IP", etc.
May
13
suggested suggested edit on How can I block an IP, if I'm getting many http requests in a second?
Mar
20
awarded  Notable Question
Mar
16
awarded  Good Question
Mar
16
awarded  Popular Question