2,229 reputation
1927
bio website amateurlayman.com
location Lower Hutt, New Zealand
age 46
visits member for 4 years, 3 months
seen 2 days ago

A software developer.


2d
reviewed Approve How to identify this hash?
Jul
21
awarded  Caucus
Jul
8
reviewed No Action Needed Why is it insecure to store the session ID in a cookie directly?
Jul
8
reviewed Approve Ali Express hijacking my Chrome
May
28
reviewed Approve How do Travel Sentry locks work? (supposedly openable only by security agencies)
Apr
26
awarded  Yearling
Apr
19
reviewed Approve What exactly does it mean when Chrome reports 'no certificate transparency information was supplied by the server?'
Apr
1
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
Hi @MichaelKjörling all of the techniques you mention are outside the scope of the One Time Pad primitive. Note that you introduce another vulnerability above when you consider an attacker conducting a denial of service attack on the communication by forcing the one time pad to be marked as "used".
Mar
25
revised LastPass login security
added 271 characters in body
Mar
17
awarded  Popular Question
Feb
20
answered Why do phones have SIM cards?
Feb
19
comment How does Tor guarantee anonymity of Tor network?
Hi again @KnightOfNi I am a little ahead of actual evidence on this one. The article spiegel.de/international/germany/… references some Snowden docs that shows for Circuit tracing attacks the NSA or GCHQ dont have enough coverage as of a few years ago. But entry/exit correlation is entirely feasible.
Feb
15
reviewed Approve Securing my API: concept of access tokens
Feb
15
reviewed Approve How secure is JavaScript based OAuth 2.0
Feb
15
awarded  Custodian
Feb
15
reviewed Approve Secure tunnel set up in an office environment
Feb
15
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
Replay attacks can reuse previously valid messages, like the "Attack at Dawn" message that the evil villain resends to the recipient three days later. The message has metadata to ensure that the correct part of the OTP is used for decryption.
Feb
13
answered Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
Feb
13
comment Can you say that since one time pad encryption is unbreakable, it is the best if used properly?
No the problem is Key Management, as the key materiel could be compromised or lost, or an attacker could 'de-synchronise' the 2 parties (DOS).
Feb
8
comment How do I know if root account has been compromised?
Or you could scan the hard drive when mounted on a known good computer with appropriate protection against getting the good computer hacked.