Reputation
2,334
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
1 9 27
Newest
 Caucus
Impact
~238k people reached

  • 0 posts edited
  • 1 helpful flag
  • 449 votes cast
Jan
21
reviewed Approve How dangerous is game guard?
Jan
19
reviewed Approve Is it possible to secretly monitor/backdoor hardware?
Jan
13
reviewed Approve Will the result of HTTPS and SSH encryption of the same data be identical for two separate requests?
Oct
28
comment why don't we measure the strength of crypto against the cost it would take to crack it?
It isn't that simple, as logjam is an attack on DH where some shared numbers were attacked with a complex precomputation. So the re-use of those numbers created a large group of people that could be pre-computed blog.cloudflare.com/… for more detail.
Oct
28
answered why don't we measure the strength of crypto against the cost it would take to crack it?
Oct
28
answered Why does initial encryption take so long?
Sep
28
comment Am I legally required to give passwords or keys for encypted data during an criminal investigation?
Physical security does usually trump computer security, examples: Rubber Hose Cryptanalysis en.wikipedia.org/wiki/Rubber-hose_cryptanalysis and the Evil Maid Attack schneier.com/blog/archives/2009/10/evil_maid_attac.html
Sep
22
comment Security of faxes vs emails
So fax's are overall low concentration data (decentralised fax machines, situated close to similar paper records) individually less secure where email is highly concentrated data somewhat better protected, this is a very intriguing (and relevant) comparison.
Aug
2
reviewed Approve How to identify this hash?
Jul
21
awarded  Caucus
Jul
8
reviewed No Action Needed Why is it insecure to store the session ID in a cookie directly?
Jul
8
reviewed Approve Ali Express hijacking my Chrome
May
28
reviewed Approve How do Travel Sentry locks work? (supposedly openable only by security agencies)
Apr
26
awarded  Yearling
Apr
19
reviewed Approve What exactly does it mean when Chrome reports 'no certificate transparency information was supplied by the server?'
Apr
1
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
Hi @MichaelKjörling all of the techniques you mention are outside the scope of the One Time Pad primitive. Note that you introduce another vulnerability above when you consider an attacker conducting a denial of service attack on the communication by forcing the one time pad to be marked as "used".
Mar
25
revised LastPass login security
added 271 characters in body
Mar
17
awarded  Popular Question
Feb
20
answered Why do phones have SIM cards?
Feb
19
comment How does Tor guarantee anonymity of Tor network?
Hi again @KnightOfNi I am a little ahead of actual evidence on this one. The article spiegel.de/international/germany/… references some Snowden docs that shows for Circuit tracing attacks the NSA or GCHQ dont have enough coverage as of a few years ago. But entry/exit correlation is entirely feasible.