1,291 reputation
715
bio website michael.kjorling.se
location
age
visits member for 4 years
seen 7 hours ago

Apr
14
comment Is it possible and does it make sense to sign an E-mail with PGP and S/MIME?
PGP signed email can be used with either inline signatures (which is what you describe) or with detached signatures. PGP/MIME is a better comparison to S/MIME than is inline PGP signatures.
Apr
7
comment What would one need to do in order to hijack a satellite?
As for your average GPS receiver not having a directional antenna, the GPS receiver needs to aquire several satellites in order to get a position fix. A high-gain antenna would not allow the receiver to receive signals from multiple satellites simultaneously, and thus would prevent it from aquiring a position fix. Hence, GPS receivers need to use reasonably omnidirectional antennas in order to serve their function. (Now, GPS ground stations would be another matter entirely.)
Apr
6
revised What's the safest way to transmit a message to another client through a server hidden from high level malicious users?
Hopefully clarify the point made, based on comments
Apr
6
suggested approved edit on What's the safest way to transmit a message to another client through a server hidden from high level malicious users?
Apr
6
comment What's the safest way to transmit a message to another client through a server hidden from high level malicious users?
@KevinKeane How? We can probably safely say that the NSA is already in a position of being able to monitor traffic across large portions of the Internet. Even if you're connecting through a VPN, traffic still has to flow back and forth as you are logged into the system, or transferring the file. The VPN provides confidentiality of the content of the transmission, but not secrecy of the fact that you are communicating with a particular host. For that you need something else; start thinking high-latency routing.
Apr
6
comment What's the safest way to transmit a message to another client through a server hidden from high level malicious users?
@wcup "not known to be vulnerable" != "known to not be vulnerable". In fact, there is a huge difference between those two statements.
Apr
4
comment How to keep database record secret even from developer having access to it?
ProtonMail claims to do just that.
Apr
4
revised ProtonMail security concerns
added 1154 characters in body
Apr
2
revised ProtonMail security concerns
added 378 characters in body
Apr
2
revised ProtonMail security concerns
added 1265 characters in body
Apr
1
answered ProtonMail security concerns
Apr
1
comment ProtonMail security concerns
Do note that the Information Security Stack Exchange site is not related to ProtonMail in any way. Any answer you get here is likely to be based on either publicly available facts, personal experience, logical reasoning based on the previous, conjecture, or a combination of those. If you happen to receive an answer from someone associated with ProtonMail that will be essentially by pure chance.
Apr
1
comment How to convince my management of a physical security risk?
@ChrisF Good point, although if the password to the internal network is posted in plain sight especially in an area where customers have relatively ready access, then the internal network effectively and for all intents and purposes becomes a guest network and needs to be treated that way. There is always the possibility of VPNs to access anything sensitive, with pre-shared secrets stored on the computers that need such access, for example. (But yes, that is a little more effort.)
Mar
16
comment Is using the concatenation of multiple hash algorithms more secure?
You may want to see the OP's edit to the question in response to my comment on it.
Mar
16
answered What's the value of data partition encryption for database files on a postgres database server?
Mar
16
comment What's the value of data partition encryption for database files on a postgres database server?
@gowenfawr That doesn't sound like a duplicate to me, given that Postgres apparently doesn't have the ability to do database-level encryption.
Mar
16
comment Is using the concatenation of multiple hash algorithms more secure?
"Is using multiple hash algorithms more secure?" you ask. Use them for what purpose?, I ask.
Mar
16
comment Why do mobile apps have fine-grained permissions while desktop apps don't?
About #1 (history), also note that in the computing ecosystem where mainframes evolved, for a very long time applications were specifically written by the user (or someone working for the user) and could thus reasonably be given the same level of trust as the user. Now that applications are often off-the-shelf solutions the ecosystem has changed, but to a very large degree the heritage of "trust the user" rather than "trust the application" remains.
Mar
16
comment Why should we focus on protecting root access on a home computer?
Related: Why do mobile apps have fine-grained permissions while desktop apps don't?
Mar
16
comment Why should we focus on protecting root access on a home computer?
@MischaArefiev Which ones do? It's certainly not a default configuration in Debian, and I'm pretty sure it's not the default in Ubuntu.