meta user
network profile
| bio | website | |
|---|---|---|
| location | Paris, France | |
| age | ||
| visits | member for | 2 years, 2 months |
| seen | May 17 at 17:24 | |
| stats | profile views | 61 |
Security consultant, specializing in application security.
|
Mar 29 |
awarded | Yearling |
|
Jan 24 |
awarded | Notable Question |
|
Jan 14 |
comment |
Which is the most vulnerable to MITM attacks, SSL or SSH? MITM has one more venue in the TLS case, as you can trick a legitimate certificate authority to issue a valid certificate. It happened before and is likely to happen again. |
|
Jan 14 |
answered | Which is the most vulnerable to MITM attacks, SSL or SSH? |
|
Dec 20 |
awarded | Nice Answer |
|
Nov 25 |
comment |
How secure is aSSL (javascript)? Does it effectively mimic SSL? Same origin policy should prevent that.For very good reasons. |
|
Nov 23 |
answered | How secure is aSSL (javascript)? Does it effectively mimic SSL? |
|
Oct 15 |
comment |
Plausible deniability for phones Truecryt not Trycrypt I assume? |
|
Oct 15 |
comment |
Doing a dictionary attack on RSA if you have the public key? Thomas nails it as usual, but you also seem have the misconception that RSA can be used for long messages. The message cannot be longer than the modulus of the public key, meaning that in practice in most cryptosystem RSA is used to encrypt the secret key of a symmetrical cipher. |
|
Jun 8 |
awarded | Caucus |
|
Mar 29 |
awarded | Yearling |
|
Mar 19 |
answered | Does TLS-OBC only improve security of Web Browsers? Does it improve the security of SSH? |
|
Jan 27 |
awarded | Necromancer |
|
Jan 2 |
awarded | Citizen Patrol |
|
Dec 29 |
awarded | Popular Question |
|
Dec 8 |
answered | If you could have only one book on web security, what would it be? |
|
Oct 28 |
comment |
How far can we go in preventing videos from spreading out using P2P networks like BitTorrent? It's pretty easy. They must not show the movie to anyone to make sure no file exists in the first place. |
|
Oct 25 |
comment |
Is it legal to log passwords from failed logins? I just saw @Jerry actually made the same point a lot earlier in a comment to the OP |
|
Oct 25 |
answered | Is it legal to log passwords from failed logins? |
|
Oct 3 |
awarded | Good Question |
