Eugene Mayevski 'EldoS Corp

less info
194 reputation
5
bio website eldos.com
location
age 36
visits member for 3 years
seen yesterday

Eugene Mayevski takes a post of Chief Technical Officer in EldoS Corporation, the company that specializes in development of security and data storage components for software developers.

You can contact EldoS Corporation and Eugene Mayevski in particular via one of Contact options on EldoS site.

Also you can check Eugene's security-related blog or Google+ page.


Nov
26
awarded  Critic
Oct
15
comment Different SSL states as seen by Safari, Chrome and Firefox
It would help if you provided english translation of the error description.
Oct
14
comment Expiring Decryption Key
@FullMetal Indeed with JavaScript on the client you are pretty much out of luck unfortunately - you will need to write plenty of cryptographic stuff in JS and JS-in-browser in general is not for cryptography (see matasano.com/articles/javascript-cryptography ). On the other hand, if the data is just the cache and you don't store all data on the client, then probably there's no reason to bother too much about protection.
Oct
13
answered Expiring Decryption Key
Feb
23
comment SSL fingerprint inconsistency: what does it mean?
@Aki leaked certificates are revoked. Revoking and replacing the certificate on 100 nodes is definitely easier and cheaper, than on 1 mln nodes, right?
Feb
22
comment SSL fingerprint inconsistency: what does it mean?
I think management and security purposes. Eg. servers in different locations could have different certificates to prevent leaking of the private key (one compromised certificate could do lots of harm, but if it's the only one for the whole ecosystem, chances for it to leak are much higher and the damage is much higher too)
Feb
22
comment SSL fingerprint inconsistency: what does it mean?
I guess Facebook servers present different certificates for whatever reason.
Jan
30
awarded  Commentator
Dec
28
awarded  Editor
Dec
28
revised OCSP and CRLs: Specified in CA or client certificate?
Fixed formatting
Dec
28
answered OCSP and CRLs: Specified in CA or client certificate?
Dec
2
comment How to roll my own security mechanism - avoid SSL
What is the best way to shoot myself in the foot?
Oct
17
comment How can PGP and openPGP be compatible?
@user420 OpenPGP defines a set of algorithms which are expected to be supported by all compliant implementations. So yes, if the application finds that the data was encrypted using the supported algorithm, the application easily decrypts it. The algorithm itself is specified in OpenPGP packet (the wrapper around encrypted data).
Oct
16
answered How can PGP and openPGP be compatible?
Jul
8
comment What is gained by hashing the last block on-device?
BTW just encountered lack of sign-only operation in Java 6 SunMSCAPI - it requires you to provide the data to hash.
Jul
7
awarded  Teacher
Jul
7
comment What is gained by hashing the last block on-device?
@osgx we see deviations from requirements here and there. I'd say that I have yet to see a device which has drivers completely compliant to standards (and free from standard violations).
Jul
7
comment What is gained by hashing the last block on-device?
@emboss then I misinterpreted your question. osgx answered this aspect of your question, I think. I can add that some devices just don't have a "sign data" function (probably for security and performance reasons). Instead they offer only SignHash function.
Jul
7
answered What is gained by hashing the last block on-device?
May
3
comment Biometric authentication in the real world
@Rory biometrics indeed was not designed for such tasks, but works pretty well to protect access to mobile devices (and it's used this way eg. in HP EliteBook notebooks) or as a part of multi-factor authentication in many scenarios.