1,288 reputation
312
bio website mricon.com
location Montreal, Canada
age 38
visits member for 1 year, 4 months
seen 12 hours ago

Systems administrator at the Linux Foundation.


Mar
31
awarded  Necromancer
Mar
31
answered Hardware-restricted root login
Mar
24
awarded  Scholar
Mar
24
accepted Does RNG play a role in PGP signing?
Mar
24
asked Does RNG play a role in PGP signing?
Feb
25
awarded  Informed
Feb
24
revised GPG key trust after a signing party
deleted 2 characters in body
Feb
24
answered GPG key trust after a signing party
Jan
16
answered How to validate a client certificate
Jan
3
answered What kinds of encryption are _not_ breakable via Quantum Computers?
Jan
2
answered How to write a rock solid TOTP implementation?
Dec
23
comment Why does Google cripple the 2FA Google Authenticator PAM module?
It's not just HMAC/SHA-1, but a modulo 10^6 of the actual hash. The attack scenario for a HOTP token generating 6-digit codes is an attacker using previously known codes to arrive at the shared secret, which, considering this truncation, makes the attacker's job even more difficult due to increased chance of collisions.
Dec
21
awarded  Nice Answer
Dec
13
awarded  Yearling
Dec
10
answered Would PGP/GPG have been a better choice than SSL for browsers and http servers to encrypt traffic?
Dec
5
comment Is SSL secure enough for a REST API - has anyone used PGP or AES to encrypt the actual data inside SSL?
"Hardware is cheap", but battery life isn't, and it's becoming dramatically more important these days.
Nov
25
answered Speaking Plain HTTP over an SSL enabled Server port
Nov
20
comment ISP and ssh tunneling
He can use sshuttle --dns to avoid that. github.com/apenwarr/sshuttle
Nov
13
comment How does YubiKey protects it's secret key?
If you're looking for assurances, I can't offer them. :) However, that's how it's supposed to work, yes.
Nov
12
comment How does YubiKey protects it's secret key?
USB interface is limited to the API the device supports -- it's not an instant full-access backdoor to the device or anything like that. Supposedly, there is no mechanism in the yubikey's API to either rewrite the keys or retrieve the keys, so the manufacturer assures us that it's impossible. Whether you trust the manufacturer or not, I leave that up to you.