137 reputation
7
bio website choerbaert.org
location Germany
age
visits member for 1 year, 9 months
seen 22 hours ago

profile for scai on Stack Exchange, a network of free, community-driven Q&A sites


Sep
30
awarded  Explainer
Sep
24
awarded  Autobiographer
Mar
26
awarded  Citizen Patrol
Mar
19
comment Windows XP has many security vulnerabilities, So why many bank using Windows XP until now?
Many security vulnerabilities? Which known security vulnerabilities are currently present in Windows XP?
Mar
7
comment What version of TLS does any web browser use when connecting to server where all SSL Protocols are enabled?
Depends on the internal priority of each browser as well as the browser's version.
Mar
4
comment Debian missing security features?
@LucasKauffman There is no information about whether ASLR is used by Debian, or why it isn't used, or if there are plans to use it in the near future. Not really helpful.
Dec
22
awarded  Critic
Dec
22
answered Any good tutorials / libaries for implementing TLS-SRP?
Dec
20
comment Are all cipher suites with rc4 in them intrinsically flawed?
What about the recent rumors about practical attacks on RC4?
Jul
3
comment Risks of software backdoors
This won't work, you can't test if a software is free of bugs. This would require to locate each bug. Which in turn allows you to fix them. Yay, no more bugs!
Apr
22
revised IPSec AH + ESP used together
surely that's a question
Apr
22
awarded  Editor
Apr
22
suggested suggested edit on IPSec AH + ESP used together
Apr
22
revised IPSec AH + ESP used together
added 117 characters in body
Apr
22
answered IPSec AH + ESP used together
Mar
25
comment What security purpose do hashes of files serve?
@Gilles That's correct. As pointless as a checksum from an unknown party :).
Mar
25
comment What security purpose do hashes of files serve?
@Luc: I never said that. If you sign the software in the first place you don't need to hash it afterwards because the signature already contains a hash.
Mar
25
comment What security purpose do hashes of files serve?
Ideally the hashes should also be signed. Transferring them over HTTPS only ensures that they don't get modified during transfer but they could already have been modified before.
Jan
18
awarded  Teacher
Jan
18
answered IPSec VPNs and symmetric keys