| bio | website | none.seriously |
|---|---|---|
| location | Germany | |
| age | 28 | |
| visits | member for | 1 year, 11 months |
| seen | 23 hours ago | |
| stats | profile views | 32 |
Physicist.
|
Jun 14 |
comment |
Why is blog spam always written so badly? The question title should have been something like "Why blog spam written so bad always?" |
|
May 14 |
comment |
How can I punish a hacker? @MarkAllen Explicit is better than implicit |
|
May 13 |
comment |
How can I punish a hacker? @MarkAllen That assumes you're in the USA |
|
Apr 16 |
revised |
What is the distinguishing point between a script kiddie and a hacker? added 4 characters in body |
|
Apr 16 |
answered | What is the distinguishing point between a script kiddie and a hacker? |
|
Apr 16 |
awarded | Popular Question |
|
Apr 4 |
accepted | How to change (sub)key usage of a PGP key? |
|
Apr 4 |
comment |
Why is application crash considered insecure? +1, Great link! |
|
Apr 3 |
comment |
What do I need to do to secure log-in and registration for my website? I hope you consider this CAPTCHA... |
|
Mar 22 |
comment |
How easy is it to find a password in a huge text file? You know there are password safes like keepass which store your passwords in a truly safe manner (assuming the one master password that you still have to remember is not too easy to guess)? |
|
Mar 20 |
awarded | Civic Duty |
|
Mar 20 |
comment |
How does the YubiKey Validation Server work from an encryption perspective? Hello David, welcome to security.SE! It is great that you directly indicate your affiliation, but in contrast to a forum we prefer putting this in the "About me" section of the user section instead - that way it will always be up to date (and when you have gained 1000 rep, the text will be shown when hovering over your user icon: security.stackexchange.com/privileges/established-user) |
|
Mar 20 |
comment |
How can I prevent people from duplicating my barcodes Why not add a hologram next to the barcode? The questions sounds like some human will scan the barcode anyway, so they could verify the hologram, which would probably cost more to forge than the intended discount is worth. The trouble is of course that even producing the original isn't that cheap... |
|
Mar 19 |
comment |
How would one crack a weak but unknown encryption protocol? Your question really lacking the details @RoryMcCune mentions, with severe influence on the "correct" answer: If all you have are encrypted messages and no background knowledge on it, the worst case assumption is that somebody used something equivalent to a one-time pad - if a truly random, irreproducible key was used you can't obtain the message without further interaction with the sender or recipient (direct or indirect). But it might be a trivial scheme as well, that an experienced cryptanalyst can break for breakfast. You can only try and see. |
|
Mar 15 |
awarded | Popular Question |
|
Mar 13 |
comment |
Should hashing hashed hashes colide or not? Related: General purpose slow/unique hash routine for dup checking of private data, without storing the data itself? |
|
Mar 8 |
comment |
Why we use GPG signatures for file verification instead of hash values? @user892001 PGP Public Keys are usually stored on public servers, e.g. keys.gnupg.net. And there's the web of trust - others can sign the public key to certify the actual authenticity, and their keys can be signed as well etc. And if this chain contains someone you actually trust to not lie, it's a lot less likely that the file's signature is from someone else |
|
Mar 8 |
accepted | Should hashing hashed hashes colide or not? |
|
Mar 8 |
comment |
Should hashing hashed hashes colide or not? Ah yes, good point. That's the very essence of any asymmetric encryption... |
|
Mar 8 |
comment |
Should hashing hashed hashes colide or not? The input space of hashed hashes is equal to the output space (a hash is as long as a hash...) - but as you state, even that is so huge that collisions are unlikely to cause harm. But what about the other side, what if the input subset of hashes is collision-free? Again there's the enormity of the hash-space, but in this case one could consider the existing inversion another hash which may actually happen to be easier to retrieve than doing a preimage attack, or not? |