681 reputation
612
bio website 127.0.0.1
location Somewhere in the vicinity of Sol
age 42
visits member for 3 years, 9 months
seen Dec 10 at 10:04

Oct
8
comment Is there a short command to test if my server is secure against the shellshock bash bug?
@chepner: why? There's a difference between the version reported by the program and the package version. Well, there can be, let's put it this way.
Aug
5
comment Attaching the same file to two separate email, does it compromise security of the “message”
I'm pretty certain that GnuPG doesn't use IDEA, because of patent issues ;)
Aug
5
accepted Attaching the same file to two separate email, does it compromise security of the “message”
Aug
5
comment Attaching the same file to two separate email, does it compromise security of the “message”
Thank you. Together with the linked answer this does seem to answer my question.
Aug
5
asked Attaching the same file to two separate email, does it compromise security of the “message”
Aug
3
awarded  Yearling
Jul
17
comment I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
@SargeBorsch: admittedly. And I agree about full-disk encryption. Assuming it's secure. Depends on your own level of (un)healthy paranoia. FDE also gets rid of the SSD problem mentioned before.
Jul
17
comment I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
@SargeBorsch: not that I know. That's similar to the problem of asking for proof of the existence of a deity, though. The most important point in the comment is that the probability values given hold for a single bit. You need 8 for a single byte and if you know what that means to the overall probability you will not want to look into the range of Mebibytes anymore. There once existed "The Great Zero Challenge" which wasn't accepted. Of course we could come up with a conspiracy theory as to why. AFAIR the old method was to extract "shadows" of the data between tracks on a disk.
May
31
comment Should statically-linked server binaries (daemons) be deemed more secure?
gotcha, thanks for the feedback.
May
31
comment Should statically-linked server binaries (daemons) be deemed more secure?
Thanks, that's an interesting point. But why wouldn't I be able to compile my code with -fPIC to enable ASLR? I understand it would perhaps not be enabled by default, but shouldn't that suffice.
May
31
comment Should statically-linked server binaries (daemons) be deemed more secure?
@vcsjones: couldn't you conversely state the same for dynamically linked binaries? As long as there is no update, both are vulnerable. Once there is an update, the only real downside seems to be the compilation time, no? But does the security increase in this scenario ("All other things being equal")?
May
30
asked Should statically-linked server binaries (daemons) be deemed more secure?
May
15
awarded  Notable Question
May
5
comment Disabling authentication via DSA keys in OpenSSH?
I'm wondering whether your assessment from the first paragraph still stands: DSA being safe and all. Just wondering, since my question is from before Snowden's leaks.
Mar
4
awarded  Notable Question
Jan
17
awarded  Nice Answer
Dec
20
revised Why does one need a high level of privacy/anonymity for legal activities?
added link to a website version of Solove's paper
Dec
20
suggested approved edit on Why does one need a high level of privacy/anonymity for legal activities?
Dec
20
awarded  Necromancer
Dec
19
awarded  Popular Question