277 reputation
16
bio website michael.kjorling.se
location
age
visits member for 2 years, 1 month
seen May 21 at 13:43
stats profile views 30

May
19
comment “Friend” stole SD card. Tracing an SD card?
It is even less likely if whoever did this emptied the card before doing the switch.
May
7
comment How to encrypt data on the server?
@emory Tagging of any kind is obviously useless if the device is not recovered, but if it is, it can be used as one piece of evidence to prove ownership.
May
3
comment How can I stop this DOS attack?
It's a minor detail, but in TCP I'm pretty sure RST is shorthand for RESET, not REST. I don't have the rep to make trivial edits, however.
May
2
comment Amount of simple operations that is safely out of reach for all humanity?
I very nearly upvoted this for the final sentence alone.
Apr
29
comment What are the practical uses of large asymmetric keys?
The number of atoms in the observable universe is estimated at up to about 10^82. Public-key cryptography doesn't work that way, but 2048 bits of key material means about 3x10^616 possible keys. To reach 10^82 possible values, you need just under 272.5 bits of entropy (2^272.5 = 1.07x10^82).
Apr
29
awarded  Critic
Apr
29
comment CTRL+ALT+DEL Login - Rationale behind it?
Wikipedia: Control-Alt-Delete: History
Apr
23
comment Does password-protecting a server's BIOS help in securing sensitive data?
@RyanAmos That blue thing in the picture isn't a circuit, it's a jumper. Oh, well, I suppose it is a circuit in the sense of "electrical circuit", but so's the electrical wiring in your home. All it does is to electrically bind two pins together. The firmware checks to see which pins (if any) are electrically connected, and acts accordingly.
Apr
12
revised Using 'sudo vim' to spawn a shell
Removed tagline
Apr
12
suggested suggested edit on Using 'sudo vim' to spawn a shell
Apr
12
comment How is “hacking” even possible if I “defend” properly?
xkcd.com/538
Mar
25
comment What security purpose do hashes of files serve?
The concept of "good data" when the data is malware samples seems... interesting. :)
Mar
24
comment Why does some popular software still use md5?
A gradual upgrade path for the data, however, is rather trivial: for example, in the case of passwords, simply re-hash the user's password on the first successful login (because they you have the plain text password). After a couple of versions (depending on the release cycle, but long enough that most people should have gone through this), deprecate support for old-style hashed passwords, then yet later remove support completely and force a password reset on login.
Mar
19
revised How would one crack a weak but unknown encryption protocol?
Linkification
Mar
19
suggested suggested edit on How would one crack a weak but unknown encryption protocol?
Feb
25
comment Threat model for huge warnings on untrusted SSL certificates and no warnings for plain HTTP connections?
+1 for the answer, and a mental +1 for the final sentence.
Feb
25
comment Why do we not trust an SSL certificate that expired recently?
What does this answer add over that of Thomas Pornin?
Feb
25
comment Why do we not trust an SSL certificate that expired recently?
@LarsH Suppose you're looking at computer-to-computer communications (let's say web services, e-mail transfer, ...) rather than user-to-computer (perhaps but not necessarily web browsing). Where should the warning go, in order to be effective?
Feb
25
comment Why do we not trust an SSL certificate that expired recently?
+1 for "If you're going to have a grace period in which you ignore expired certificates, how long does it last?". That's the real reason, I believe, why a grace period would never work: it simply artificially extends the validity period, which means you could just as well use a longer validity period to begin with. Which all software would implement in the same way.
Feb
21
comment Does disabling right click have any impact on security?
@Alexios Inspect Element perhaps? Or Bookmark this page. :)