704 reputation
218
bio website none.seriously
location Germany
age 28
visits member for 1 year, 11 months
seen 23 hours ago
stats profile views 32

Physicist.


Jun
14
comment Why is blog spam always written so badly?
The question title should have been something like "Why blog spam written so bad always?"
May
14
comment How can I punish a hacker?
@MarkAllen Explicit is better than implicit
May
13
comment How can I punish a hacker?
@MarkAllen That assumes you're in the USA
Apr
16
revised What is the distinguishing point between a script kiddie and a hacker?
added 4 characters in body
Apr
16
answered What is the distinguishing point between a script kiddie and a hacker?
Apr
16
awarded  Popular Question
Apr
4
accepted How to change (sub)key usage of a PGP key?
Apr
4
comment Why is application crash considered insecure?
+1, Great link!
Apr
3
comment What do I need to do to secure log-in and registration for my website?
I hope you consider this CAPTCHA...
Mar
22
comment How easy is it to find a password in a huge text file?
You know there are password safes like keepass which store your passwords in a truly safe manner (assuming the one master password that you still have to remember is not too easy to guess)?
Mar
20
awarded  Civic Duty
Mar
20
comment How does the YubiKey Validation Server work from an encryption perspective?
Hello David, welcome to security.SE! It is great that you directly indicate your affiliation, but in contrast to a forum we prefer putting this in the "About me" section of the user section instead - that way it will always be up to date (and when you have gained 1000 rep, the text will be shown when hovering over your user icon: security.stackexchange.com/privileges/established-user)
Mar
20
comment How can I prevent people from duplicating my barcodes
Why not add a hologram next to the barcode? The questions sounds like some human will scan the barcode anyway, so they could verify the hologram, which would probably cost more to forge than the intended discount is worth. The trouble is of course that even producing the original isn't that cheap...
Mar
19
comment How would one crack a weak but unknown encryption protocol?
Your question really lacking the details @RoryMcCune mentions, with severe influence on the "correct" answer: If all you have are encrypted messages and no background knowledge on it, the worst case assumption is that somebody used something equivalent to a one-time pad - if a truly random, irreproducible key was used you can't obtain the message without further interaction with the sender or recipient (direct or indirect). But it might be a trivial scheme as well, that an experienced cryptanalyst can break for breakfast. You can only try and see.
Mar
15
awarded  Popular Question
Mar
13
comment Should hashing hashed hashes colide or not?
Related: General purpose slow/unique hash routine for dup checking of private data, without storing the data itself?
Mar
8
comment Why we use GPG signatures for file verification instead of hash values?
@user892001 PGP Public Keys are usually stored on public servers, e.g. keys.gnupg.net. And there's the web of trust - others can sign the public key to certify the actual authenticity, and their keys can be signed as well etc. And if this chain contains someone you actually trust to not lie, it's a lot less likely that the file's signature is from someone else
Mar
8
accepted Should hashing hashed hashes colide or not?
Mar
8
comment Should hashing hashed hashes colide or not?
Ah yes, good point. That's the very essence of any asymmetric encryption...
Mar
8
comment Should hashing hashed hashes colide or not?
The input space of hashed hashes is equal to the output space (a hash is as long as a hash...) - but as you state, even that is so huge that collisions are unlikely to cause harm. But what about the other side, what if the input subset of hashes is collision-free? Again there's the enormity of the hash-space, but in this case one could consider the existing inversion another hash which may actually happen to be easier to retrieve than doing a preimage attack, or not?