2,298 reputation
32044
bio website none.seriously
location Switzerland
age 30
visits member for 3 years, 10 months
seen yesterday

Physicist.


Mar
23
awarded  Nice Question
Mar
13
awarded  Nice Question
Mar
12
comment Is there cryptographic material in a phone's SIM card that can be used with RSA encryption?
Very helpful answer :) However, nowadays the standards seem to be KASUMI and MILENAGE, see here
Mar
12
revised Why is device ownership useful?
edited tags
Mar
12
comment Is there cryptographic material in a phone's SIM card that can be used with RSA encryption?
Doesn't your second point defy the purpose of the private key being, you know, private?
Feb
2
comment How to set up OpenSSH to use x509 PKI for authentication?
Thanks, looks promising
Jan
27
awarded  Notable Question
Jan
22
awarded  Nice Answer
Jan
13
comment How do I verify that WhatsApp is using end-to-end encryption?
Even if you sniff the packets and notice they are encrypted, you can't know for sure whether they are truly encrypted only to the recipient's key and not to a combined NSA key...
Jan
12
comment Testing a password for similarity to previous hashes
I can perfectly agree with your point, personally I dislike all those basically awkward password policies... I just thought it worth mentioning that depending on your scenario a regular password change is no bad idea - do you actually always check your last unix login time? The IP address log may however be more helpful indeed, but still requires user attention...
Jan
12
answered Testing a password for similarity to previous hashes
Jan
12
comment Testing a password for similarity to previous hashes
There is one valid reason to require regular password changes, see this question: If someone obtains your password without detection, they can use it all the time until you change it. Yet another reason why one should simply use two-factor authentication, where this problem cannot occur (assuming the second factor is not clone-able)
Jan
10
comment What is the purpose of the “Password minimum age” setting?
@tepples You can compute all mutations of the new password within the unacceptable edit distance, calculate their hashes and compare them to old password hashes (with the respective salts).
Jan
10
comment What is the purpose of the “Password minimum age” setting?
@tepples You sure can check the edit distance from your current password by comparing its modifaction's hashes with the stored ones
Jan
9
awarded  Notable Question
Nov
16
awarded  Nice Question
Nov
10
awarded  Popular Question
Oct
14
awarded  Notable Question
Oct
9
comment Why is “something you know” the weakest factor of authentication?
100% agreed upon
Oct
9
comment Why is “something you know” the weakest factor of authentication?
At a certain point it might however be easier to simply bypass the scanning mechanism itself. Nonetheless I agree that biometric isn't something one should rely on (at least not exclusively)