Eugene Mayevski 'EldoS Corp

less info
159 reputation
4
bio website eldos.com
location
age 35
visits member for 2 years, 1 month
seen Jan 27 at 18:51
stats profile views 23

Eugene Mayevski takes a post of Chief Technical Officer in EldoS Corporation, the company that specializes in development of security and data storage components for software developers.

You can contact EldoS Corporation and Eugene Mayevski in particular via one of Contact options on EldoS site.

Also you can check Eugene's security-related blog or Google+ page.


Feb
23
comment SSL fingerprint inconsistency: what does it mean?
@Aki leaked certificates are revoked. Revoking and replacing the certificate on 100 nodes is definitely easier and cheaper, than on 1 mln nodes, right?
Feb
22
comment SSL fingerprint inconsistency: what does it mean?
I think management and security purposes. Eg. servers in different locations could have different certificates to prevent leaking of the private key (one compromised certificate could do lots of harm, but if it's the only one for the whole ecosystem, chances for it to leak are much higher and the damage is much higher too)
Feb
22
comment SSL fingerprint inconsistency: what does it mean?
I guess Facebook servers present different certificates for whatever reason.
Jan
30
awarded  Commentator
Dec
28
awarded  Editor
Dec
28
revised OCSP and CRLs: Specified in CA or client certificate?
Fixed formatting
Dec
28
answered OCSP and CRLs: Specified in CA or client certificate?
Dec
2
comment How to roll my own security mechanism - avoid SSL
What is the best way to shoot myself in the foot?
Oct
17
comment How can PGP and openPGP be compatible?
@user420 OpenPGP defines a set of algorithms which are expected to be supported by all compliant implementations. So yes, if the application finds that the data was encrypted using the supported algorithm, the application easily decrypts it. The algorithm itself is specified in OpenPGP packet (the wrapper around encrypted data).
Oct
16
answered How can PGP and openPGP be compatible?
Jul
8
comment What is gained by hashing the last block on-device?
BTW just encountered lack of sign-only operation in Java 6 SunMSCAPI - it requires you to provide the data to hash.
Jul
7
awarded  Teacher
Jul
7
comment What is gained by hashing the last block on-device?
@osgx we see deviations from requirements here and there. I'd say that I have yet to see a device which has drivers completely compliant to standards (and free from standard violations).
Jul
7
comment What is gained by hashing the last block on-device?
@emboss then I misinterpreted your question. osgx answered this aspect of your question, I think. I can add that some devices just don't have a "sign data" function (probably for security and performance reasons). Instead they offer only SignHash function.
Jul
7
answered What is gained by hashing the last block on-device?
May
3
comment Biometric authentication in the real world
@Rory biometrics indeed was not designed for such tasks, but works pretty well to protect access to mobile devices (and it's used this way eg. in HP EliteBook notebooks) or as a part of multi-factor authentication in many scenarios.
May
1
comment Biometric authentication in the real world
@AviD thank you for the number. For fingerprints authentication the numbers are 99,99% and higher (i.e. one failure in 10000 attempts or so). So voice is a bit behind in this aspect. That is why I called it "far from working" and didn't count it.
May
1
comment Biometric authentication in the real world
@AviD are you talking about voice recognition or voice authentication? We are talking about security here, so the voice-based solution must distinguish the owners of the voice with high reliability.
Apr
30
comment Biometric authentication in the real world
@Rory Voice is far from working at the moment, and so is typing speed pattern. Those technologies are highly experimental and too unreliable for real-world use.
Apr
29
answered Biometric authentication in the real world