Eugene Mayevski 'EldoS Corp

less info
194 reputation
5
bio website eldos.com
location
age 36
visits member for 3 years, 4 months
seen Aug 24 at 19:40

Eugene Mayevski takes a post of Chief Technical Officer in EldoS Corporation, the company that specializes in development of security and data storage components for software developers.

You can contact EldoS Corporation and Eugene Mayevski in particular via one of Contact options on EldoS site.

Also you can check Eugene's security-related blog or Google+ page.


Aug
14
comment Why can't you decrypt an encrypted message with just the public key?
@rubo77 because this is how PKI works. If you want to study how PKI works, I can recommend a book or two on PKI. The "simple" explanation takes chapters there and is not suitable for StackExchange format.
Jun
28
comment How to get net anonymity while browsing?
I doubt VPN will be allowed if they enforce proxying on everything.
Jun
28
comment Accessing Chrome and Gmail on a stolen drive
Search for "PIN-protected USB flash drive" on Google. These devices require that you enter a PIN before using the disk, and thus secure your data from being stolen and misused.
Apr
25
comment Does a PGP signature provide integrity verification?
Just a note - the sign function applies the private key as a parameter, not "combines" it. The signed data does not include a private key in any form.
Nov
26
awarded  Critic
Oct
15
comment Different SSL states as seen by Safari, Chrome and Firefox
It would help if you provided english translation of the error description.
Oct
14
comment Expiring Decryption Key
@FullMetal Indeed with JavaScript on the client you are pretty much out of luck unfortunately - you will need to write plenty of cryptographic stuff in JS and JS-in-browser in general is not for cryptography (see matasano.com/articles/javascript-cryptography ). On the other hand, if the data is just the cache and you don't store all data on the client, then probably there's no reason to bother too much about protection.
Oct
13
answered Expiring Decryption Key
Feb
23
comment SSL fingerprint inconsistency: what does it mean?
@Aki leaked certificates are revoked. Revoking and replacing the certificate on 100 nodes is definitely easier and cheaper, than on 1 mln nodes, right?
Feb
22
comment SSL fingerprint inconsistency: what does it mean?
I think management and security purposes. Eg. servers in different locations could have different certificates to prevent leaking of the private key (one compromised certificate could do lots of harm, but if it's the only one for the whole ecosystem, chances for it to leak are much higher and the damage is much higher too)
Feb
22
comment SSL fingerprint inconsistency: what does it mean?
I guess Facebook servers present different certificates for whatever reason.
Jan
30
awarded  Commentator
Dec
28
awarded  Editor
Dec
28
revised OCSP and CRLs: Specified in CA or client certificate?
Fixed formatting
Dec
28
answered OCSP and CRLs: Specified in CA or client certificate?
Dec
2
comment How to roll my own security mechanism - avoid SSL
What is the best way to shoot myself in the foot?
Oct
17
comment How can PGP and openPGP be compatible?
@user420 OpenPGP defines a set of algorithms which are expected to be supported by all compliant implementations. So yes, if the application finds that the data was encrypted using the supported algorithm, the application easily decrypts it. The algorithm itself is specified in OpenPGP packet (the wrapper around encrypted data).
Oct
16
answered How can PGP and openPGP be compatible?
Jul
8
comment What is gained by hashing the last block on-device?
BTW just encountered lack of sign-only operation in Java 6 SunMSCAPI - it requires you to provide the data to hash.
Jul
7
awarded  Teacher