866 reputation
611
bio website michael.kjorling.se
location
age
visits member for 3 years, 3 months
seen Jul 9 at 12:53

Jun
19
comment Anonymity on Facebook - how do they suggest people I should know?
Frankly IMO this question could be pared down to very little more than "with a brand new account with only a phone number as a personal identifier, how is Facebook able to so accurately suggest people I may know?". The wall of text (literally a screenful of it) adds very little above and beyond that.
Jun
19
comment Hashing Email Address and Contacting User
How do you handle the situation where the user remembers their username, but not the email address they used to sign up for your service?
Jun
6
revised How can I secure my wireless network from neighbor's password-cracking attempts?
Better title
Jun
6
awarded  Organizer
Jun
6
revised SSH connection attempts from China show different key; is China doing a MITM attack on SSH traffic?
Better title, remove superflouous `<BR>` in body, add 'man-in-the-middle' tag
Jun
6
suggested suggested edit on How can I secure my wireless network from neighbor's password-cracking attempts?
Jun
6
suggested suggested edit on SSH connection attempts from China show different key; is China doing a MITM attack on SSH traffic?
May
31
comment What's keeping a malicious man in the middle server from forging a valid certificate
@Bob And when was the last time you manually confirmed the certificate fingerprint on every single request?
May
31
comment What's keeping a malicious man in the middle server from forging a valid certificate
Note that if the MITM is some sort of proxy within a corporation, its signing certificate may be installed on clients within that corporation, hence making it possible to successfully impersonate the remote host. The only way to detect that would be to check upstream certs, possibly manually.
May
28
comment Does using the same encryption algorithm multiple times make a difference?
You really should edit your post to include additional information, rather than responding in comments. (Although using a reply comment to draw the attention of whomever asked for the additional information to the edit is usually a good idea.) Comments are supposed to be ephemeral, and are second-class citizens on Stack Exchange; they can be (and many times are) deleted for almost any reason.
May
27
comment Does using the same encryption algorithm multiple times make a difference?
"using the same encryption algorithm and key multiple times to encrypt data will not change the outcome of the attack" Well, obviously; it will slow down each test a bit, but it won't buy you any significant additional security. Could you perhaps elaborate on what reason you have for stating that the same key is used multiple times?
May
26
comment Secure process threads
Where would you store the key? Where would you store the plaintext data (data and executable code) that the CPU should see?
May
25
comment How to establish a random OTR remote party as a specific individual?
"This is all just speculation" Exactly. I'm hoping for an authoritative answer, even if that answer is "without out of band knowledge, such establishment of identity is not possible with OTR" (though obviously preferably more fleshed out than that).
May
25
comment How to establish a random OTR remote party as a specific individual?
Such as what, considering that Greenwald had no idea who he was talking to and Snowden had exchanged no information that he could trust wouldn't been known by an adversary?
May
24
awarded  Student
May
24
revised How to establish a random OTR remote party as a specific individual?
added 1 character in body
May
24
asked How to establish a random OTR remote party as a specific individual?
May
24
comment Sending passwords to someone remotely
Particularly if it's only for temporary use, why use a hash? Just make a GUID (mkdir -v $(uuidgen)), or take the number of nanoseconds since the second at this arbitrary point in time (mkdir -v $(date +%N)). Both will be pretty hard to just "stumble upon" in the short amount of time it exists if you clean it up afterwards.
May
23
comment Sending passwords to someone remotely
How do you establish the OTR keys as trusted?
May
22
answered WHOIS Contact Details Abused