706 reputation
410
bio website
location Berlin, Germany
age
visits member for 4 years, 4 months
seen 13 hours ago

May
18
comment Ensure that a file can only be decrypted after a specific date
New altcoins need new features to differentiate themselves from existing coins. This feature alone might not justify a new coin but together with other features it might. Such a feature could be especially valuable if the blockchain get's used as a public store of information. I could imagine to preregister scientific trials on a blockchain. In that case scientists might want to have a time lag till the information get's public but at the same time the information is not valuable enough for an attacker.
May
18
answered Ensure that a file can only be decrypted after a specific date
May
9
comment New Gmail login system—going against conventional wisdom?
A spammer who wants to build an account list can rent a botnet to get around blocking by IP subnet.
May
3
awarded  Critic
Apr
13
comment Is it possible that to sign a message with a PGP key in a way that leakes the key
To me that doesn't seem "hidden" but openly visible. Is there a way to use fancy math to really hide it?
Apr
13
asked Is it possible that to sign a message with a PGP key in a way that leakes the key
Dec
21
awarded  Popular Question
Nov
5
comment Do we really need a long and complicated password for websites?
@drpexe Do you get any spam emails? Then a bot somewhere is targeting your username.
Sep
18
awarded  Editor
Sep
18
revised Trying to understand why signatures in root certs “are not used”?
Formatting
Sep
18
suggested approved edit on Trying to understand why signatures in root certs “are not used”?
Sep
9
answered Why are apps signed?
Sep
9
comment Why is HTTPS not the default protocol?
A telephone number on a "brochure-ware site" might be completely public information. That doesn't mean being able to spoof a telephone number on that website isn't a security risk.
Sep
2
answered Why can't PGP/GPG Web-of-Trust be automated?
Aug
17
answered Why do we use such a redundant language (English) for network communication?
Aug
16
accepted Why doesn't the OS give every application a secret password?
Aug
16
asked Why doesn't the OS give every application a secret password?
Aug
10
comment Is there ever a good reason _not_ to use TLS/SSL?
The fact that you don't value your privacy doesn't mean that you can be confident that you don't have users who value their privacy.
Aug
9
comment Is there ever a good reason _not_ to use TLS/SSL?
Not everyone who uses the website is a member of the target audience. It's also not trivial to understand what someone can do with knowledge of browsing habits.An attacker can build personality profiles through complex correlations that you simply don't see when you think about your website.
Aug
9
comment Is there ever a good reason _not_ to use TLS/SSL?
The can assess their security needs, but not the needs of the visitors especially if the owner of the website doesn't have much information about the visitors.