Reputation
55,892
Next tag badge:
102/100 score
19/20 answers
Badges
19 102 178
Impact
~3.0m people reached

2d
awarded  Great Answer
Apr
29
awarded  Yearling
Apr
26
awarded  Nice Answer
Apr
25
awarded  Nice Answer
Apr
25
answered Best practices: Use of a single private key as a person, or multiple to identify self across domains?
Apr
24
answered Is it a good idea to let a database do a password check?
Apr
20
comment How secure are the FIDO U2F tokens
@Pacerier How about: "As of the writing of this answer, I haven't contributed to the security key project." :)
Apr
13
awarded  Nice Answer
Apr
1
awarded  Nice Answer
Mar
29
revised Is Google overreaching by forcing me to use TLS?
added 207 characters in body
Mar
29
revised Is Google overreaching by forcing me to use TLS?
added 235 characters in body
Mar
29
revised Is Google spying on all of us?
added 278 characters in body
Mar
18
comment Two-Step vs. Two-Factor Authentication - Is there a difference?
@Thomas Yubikeys, TPM chips, etc., employ anti-tampering mechanisms to prevent key extraction specifically for this reason. Any attempt at directly extracting the key will, as a rule, destroy it. This assertion is guaranteed to the extent that any viable extraction mechanism is treated as a serious security vulnerability. This does NOT apply to SIM cards; further, SMS is a poor 2nd factor for reasons more severe than what you've mentioned.
Mar
14
awarded  Nice Answer
Mar
14
awarded  Enlightened
Mar
14
awarded  Nice Answer
Mar
11
comment Is it possible to get the pass phrase for private key file
Yep, just try every possibility until you get guess right.
Mar
11
answered Hack-resistant hosting solution for non-profit?
Mar
5
answered “fake” phishing mails from CST
Mar
4
awarded  Good Answer