818 reputation
714
bio website 127.0.0.1
location Somewhere in the vicinity of Sol
age 43
visits member for 4 years, 3 months
seen May 19 at 12:25

May
5
awarded  Yearling
Apr
18
accepted How trustworthy is SELinux?
Apr
18
awarded  Nice Question
Feb
27
comment What are the benefits and drawbacks of the HTML5 Keygen element?
do you know of a way to ensure or see that a generated private key doesn't leave my machine in such a process?
Feb
27
comment Making the Firefox key and CSR creation process transparent
@StackzOfZtuff: there you go
Feb
26
asked Making the Firefox key and CSR creation process transparent
Jan
12
awarded  Nice Answer
Oct
8
comment Is there a short command to test if my server is secure against the shellshock bash bug?
@chepner: why? There's a difference between the version reported by the program and the package version. Well, there can be, let's put it this way.
Aug
5
comment Attaching the same file to two separate email, does it compromise security of the “message”
I'm pretty certain that GnuPG doesn't use IDEA, because of patent issues ;)
Aug
5
accepted Attaching the same file to two separate email, does it compromise security of the “message”
Aug
5
comment Attaching the same file to two separate email, does it compromise security of the “message”
Thank you. Together with the linked answer this does seem to answer my question.
Aug
5
asked Attaching the same file to two separate email, does it compromise security of the “message”
Aug
3
awarded  Yearling
Jul
17
comment I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
@SargeBorsch: admittedly. And I agree about full-disk encryption. Assuming it's secure. Depends on your own level of (un)healthy paranoia. FDE also gets rid of the SSD problem mentioned before.
Jul
17
comment I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
@SargeBorsch: not that I know. That's similar to the problem of asking for proof of the existence of a deity, though. The most important point in the comment is that the probability values given hold for a single bit. You need 8 for a single byte and if you know what that means to the overall probability you will not want to look into the range of Mebibytes anymore. There once existed "The Great Zero Challenge" which wasn't accepted. Of course we could come up with a conspiracy theory as to why. AFAIR the old method was to extract "shadows" of the data between tracks on a disk.
May
31
comment Should statically-linked server binaries (daemons) be deemed more secure?
gotcha, thanks for the feedback.
May
31
comment Should statically-linked server binaries (daemons) be deemed more secure?
Thanks, that's an interesting point. But why wouldn't I be able to compile my code with -fPIC to enable ASLR? I understand it would perhaps not be enabled by default, but shouldn't that suffice.
May
31
comment Should statically-linked server binaries (daemons) be deemed more secure?
@vcsjones: couldn't you conversely state the same for dynamically linked binaries? As long as there is no update, both are vulnerable. Once there is an update, the only real downside seems to be the compilation time, no? But does the security increase in this scenario ("All other things being equal")?
May
30
asked Should statically-linked server binaries (daemons) be deemed more secure?
May
15
awarded  Notable Question