David Cary

672 reputation

413

bio	website
	location
	age
visits	member for	2 years, 2 months
	seen	yesterday
stats	profile views	15

	672 reputation	bio	website		visits	member for	2 years, 2 months
413 badges		location			seen	yesterday

summary answers questions tags badges favorites bounties reputation activity

80 Actions

suggestions reviews revisions comments badges posts accepts all

Jun 17	comment	An alternative to traditional passwords: is there some merit to this idea? @drjimbob: Yes, per-user salt and key stretching is the right thing to do, for exactly the reasons you mention.
Jun 17	suggested	suggested edit on passwords tag wiki
Jun 14	answered	Applying file deltas to an encrypted file
Jun 14	answered	An alternative to traditional passwords: is there some merit to this idea?
Jun 13	awarded	Yearling
Jun 12	answered	Applying file deltas to an encrypted file
Jun 3	comment	Online Government Elections System - Is it possible? @curiousguy: Are you asking "How do end-to-end auditable voting systems such as ThreeBallot avoid the kind of 'proof of vote' that could be used in vote-buying and coerced voting?" ? That would make a great separate question.
May 30	comment	Online Government Elections System - Is it possible? @curiousguy: ThreeBallot and other end-to-end auditable voting systems allow voters to prove their votes were counted, but without keeping the kind of "proof of his vote" that could be used in vote-buying or duress (3).
May 19	comment	moving from MD5 to SHA-512 Option 3 is described in more detail at Upgrading User Password Hashes in Place
May 19	asked	Are there a standard method(s) for me to give someone else read-only access to my data?
May 17	answered	Voting System, is there a hole here?
Jan 3	awarded	Student
Jan 2	asked	Can a dictionary attack crack a Diceware passphrase?
Nov 11	comment	Are there sensors/devices to be used for reading magnetic bits of hard disk +1. I wonder if an open-source atomic microscope can be adapted to read bits off a hard drive platter?
Jun 12	comment	How long should the password be? "many security experts such as Bruce Schneier recommend that people use passwords that are too complicated to memorize, write them down on paper, and keep them in a wallet." -- en.wikipedia.org/wiki/Password#Write_down_passwords_on_paper
Apr 17	comment	Is Schneier's “Applied Cryptography” current? I suspect that soon questions like this will be transferred to a cryptography StackExchange.
Mar 19	awarded	Teacher
Mar 19	answered	Keyboards immune to signal monitoring?
Mar 4	awarded	Supporter
Feb 28	comment	What's the standard way to encrypt a file with a public key in Java? @Graham , Yes, I agree that if the pgp tool that the Java program uses is compromised, then we have a problem. However (and I think @D.W. will agree with me), this is not a "new problem", compared to doing a functionally equivalent encryption "internally" in Java to avoid dependencies. Any cracker that can corrupt the pgp tool can just as easily corrupt the functionally equivalent code in the Java application.