Reputation
798
Top tag
Next privilege 1,000 Rep.
See votes, expandable usercard
Badges
1 7 26
Impact
~43k people reached

Feb
5
revised Is it theoretically possible to decrypt a file without the key/password?
Corrected typo, correctly linked up the link…
Feb
5
suggested approved edit on Is it theoretically possible to decrypt a file without the key/password?
Feb
5
awarded  Popular Question
Jan
21
comment Feeding /dev/random entropy pool?
Do not simply trust (let’s just call them) “services” like random.org for cryptographic purposes.
Jan
17
awarded  Quorum
Dec
29
comment Application level proxy on HTML. Capabilities
@mikeazo Normally de-located from user. Think proxyfied connection via off-site relay server. (3rd-party attack vector possible; meaning “MITM vulnerable” unless VPN is trusted and/or 100% user-controlled.)
Dec
29
comment Application level proxy on HTML. Capabilities
@mikeazo Regular HTTP connection(s) routed via VPN (virtual private network) server(s).
Oct
19
awarded  Nice Answer
Oct
11
comment Why would someone trust DuckDuckGo or other providers with a similar privacy policy?
3 years late… just wanted to drop that a privacy-protected whois doesn’t prevent finding the location of an officially registered company: DuckDuckGo, Inc. is ”…headquartered in Paoli, Pennsylvania, USA…” as Bloomberg’s info and even the Yellow Pages entry seem to confirm. Maybe just pick up the phone and give the founder, “yegg” a call in case of doubt? ;)
Aug
19
awarded  Revival
Aug
12
comment Is it possible to make a living selling exploits?
@KonradRudolph To avoid extended discussions in the comment area, let me just say I ain't stopping anyone. ;) In case you want to talk more, drop an email (See my profile)
Aug
12
comment Is it possible to make a living selling exploits?
@KonradRudolph Differently stated: I’ld rather go for the regulated gun-and-bullets market than for exploits… the later doesn’t offer you any regulated protection. Instead, there are many regulations and laws prohibiting things which would practically boil down to electronic warfare. Don’t get me wrong, some companies (I’m looking towards the French riviera) make a living from exploits… but I can assure you they’re walking a thin line and they’re far from safe when sh#t hits the fan. All that’s left: you could try to sell exploits to your own government. (Good luck with that one…)
Aug
12
comment Is it possible to make a living selling exploits?
@KonradRudolph You are ignoring the fact that there very well are (hidden) regulations in place. Let’t take a fictive example: we two group up to found a company to sell exploits we find. One day, we sell an exploit to a client which happens to be a terrorist, foreign-government agent, or whatever. When that exploit is used to target the country we live in, nothing will save us. We’ld have supplied ”an enemy of the state” with ”a weapon”. There are ample laws which would break our necks in that case – as we would have engaged in illegal, criminal activity by providing an electronic weapon.
Aug
12
comment Is it possible to make a living selling exploits?
@KonradRudolph Well, just ask an average arms dealer how his/her job worked out in the end.
Jul
24
awarded  Constituent
Jul
20
awarded  Caucus
Jun
16
comment Security of online storage of KeePass-like files
I'm voting to close this question as off-topic because it is more about security instead of cryptography as we tend to handle it here, Besides that, this is not the place for software recommendations. All in all I think the question has a better chance to receive good answers at Security.SE.
May
17
awarded  Yearling
Apr
22
suggested rejected edit on WiFi deauth attack - Difference between Aireplay and MDK3
Dec
8
revised What is the difference between login throttling and temporary account lockout?
Removed superfluous chit-chat.