922 reputation
1819
bio website
location Singapore
age 22
visits member for 2 years, 11 months
seen 2 days ago

Apr
14
comment How can an attacker use a leaked private key?
@Yogu, If he needs root access to modify /etc/hosts, then basically he can already get what he needs without modifying it.
Apr
12
comment How difficult to crack keepass master password?
@Thomas, Except that your claim "the future is all about parallelization" is obviously wrong as explained in that article I've linked.
Apr
11
comment How reliable is a password strength checker?
This is misleading. Length usually gives entropy, yes, but not always.
Apr
11
comment How reliable is a password strength checker?
@StephenPaulger, Care to elaborate on how a "markov model based brute forcer" works?
Apr
11
comment What are the weaknesses of this password-generation-method? How can it be improved?
@D.W. Assuming Mnementh did manage to usably use this algorithm (and of course kept his algorithm secret) then it wouldn't it be pretty workable?
Apr
11
awarded  Vox Populi
Apr
11
comment How can an attacker use a leaked private key?
What's the linux equivalent?
Apr
11
comment How can an attacker use a leaked private key?
@SteelCityHacker, Doesn't "assume the same private key" and "no use of PFS" mean the same thing?
Apr
11
comment Password manager vs remembering passwords
+1 for "memorization is not scalable"
Apr
11
revised Bank accepts different password to the one that I set
added important info
Apr
11
suggested suggested edit on Bank accepts different password to the one that I set
Apr
11
comment What is the point of hashing passwords?
@Thomas. So do you mean that in a world where sysadmins are actually bots, we don't need to hash passwords?
Apr
11
comment Is there any point in using 'strong' passwords?
@SpellingD, That seems to ignore dna computing, quantum computing, and breakthroughs beyond quantum computing. Hence "No password is unbreakable" still may hold true.
Apr
11
comment Is there any point in using 'strong' passwords?
@Terry, Why do you recommend bcrypt/pbkdf2 over SHA/MD5?
Apr
11
comment How difficult to crack keepass master password?
@Thomas, Except in the future may we have other unpredictably faster ways to compute besides using electrical computers. en.wikipedia.org/wiki/…
Apr
10
comment Is there an alternative to TCP/IP that encrypts end-to-end?
@gowenfawr, the OP is asking for a low-level communication protocol. Yes the question states alternatives to TCP/IP but I belive he meant alternatives to IP itself. IP is layer 3 whereas Ethernet is layer 2.
Apr
9
comment Is there an alternative to TCP/IP that encrypts end-to-end?
@gowenfawr, Why are you commenting on stack 3 instead of stack 2?
Apr
9
comment Is there an alternative to TCP/IP that encrypts end-to-end?
This answer need more votes.
Apr
8
accepted Where is the first online reference to the “HeartBleed” bug?
Apr
8
comment Where is the first online reference to the “HeartBleed” bug?
@Byte56, Is how the vulnerability info disseminated not a security question?