Reputation
241
Top tag
Next privilege 250 Rep.
View close votes
Badges
2 10
Newest
 Editor
Impact
~6k people reached

  • 0 posts edited
  • 0 helpful flags
  • 17 votes cast
Jan
24
accepted How to communicate security expectations to users in an end-to-end encrypted chat app?
Jan
15
comment How to communicate security expectations to users in an end-to-end encrypted chat app?
I'm saying that the client software uses end to end encryption. The Web client does not, and I'm trying to communicate this to my users.
Jan
14
awarded  Editor
Jan
14
revised How to communicate security expectations to users in an end-to-end encrypted chat app?
added 1 character in body
Jan
14
asked How to communicate security expectations to users in an end-to-end encrypted chat app?
Nov
27
awarded  Notable Question
Jul
17
accepted Is this idea for a password manager secure? If so, why doesn't anybody use it?
Jul
17
awarded  Nice Question
Jul
17
awarded  Yearling
Jul
16
awarded  Popular Question
Jul
16
awarded  Critic
Jul
16
asked Is this idea for a password manager secure? If so, why doesn't anybody use it?
May
6
comment What makes Let's Encrypt secure?
@Brian An active MiTM attacker would also break Let's Encrypt.
Mar
2
awarded  Popular Question
Sep
24
awarded  Autobiographer
Jan
5
accepted Why would Tor not be vulnerable to this easy-sounding attack?
Jan
5
accepted Why are security-crucial software written in unsafe languages?
Oct
21
comment Why are security-crucial software written in unsafe languages?
Why is that an issue? I can't believe every single GC in the world relies on undefined behavior, and might crash the kernel.
Oct
21
comment Why are security-crucial software written in unsafe languages?
Even professional developers can make fatal mistakes in coding C. I doubt, for example, that the makers of Firefox and Chrome were "unprofessional". On the other hand, it is reasonably easy for an "amateur", who knows a lot about theoretical cryptography but NOT about the nitty-gritties of low-level programming, to write secure software in a high-level language.
Oct
21
comment Why are security-crucial software written in unsafe languages?
But things like malloc can block for a long time as well. Moreover, common "deterministic" GCs such as C++ refcounting smart pointers do cause large amounts of lag when, say, the root of an enormous tree goes out of scope, and the whole tree must be freed IMMEDIATELY.