Reputation
37,639
Next tag badge:
153/100 score
19/20 answers
Badges
14 88 160
Newest
 Nice Answer
Impact
~1.3m people reached

9h
revised Chosen plain text and chose ciphertext definitions clarification
edited tags
Aug
26
reviewed Close Is there a list of web technologies, and the corresponding privacy risks and mitigations?
Aug
26
reviewed Leave Open Active directory authentication and authorization for an application
Aug
26
comment Active directory authentication and authorization for an application
@Stephane this is not a coding question, so it doesn't belong on Stackoverflow. It is a question of security architecture and design, so it does belong here - however it is a bit broad and difficult to give a complete answer... Perhaps if Pang can focus the question better?
Aug
25
revised Is a server infrastructure fundamentally possible which the smartest person can't breach?
Un-gender-ized the question
Aug
25
comment Legality of scanning a site with SSLLabs SSL Server Test in order to find and report weaknesses
IANAL, and as the other comment says we can't really answer legal questions per se. However, it's not really a question of legality since SSLLanbs doesn't actually scan the site - it just parses the certificate, protocol headers, and etc, and displays the results. Yes, it might make several connection attempts, but these are ALL publicly visible, and in fact what your browser actually uses each time it connects. So, there is really not any legal question here, but again IANAL.
Aug
23
reviewed Close Popup ads in Android app
Aug
23
comment Popup ads in Android app
I am not really sure this is at all an InfoSec question, and would consider migrating it to Stack Overflow - however, as @SteffenUllrich pointed out, this could be the result of several forms of attack - but still not really easy to answer without more information. Can you add some more details, context, etc?
Aug
23
comment How to sell a new idea – “100% secure communication”, feedback wanted
Also, challenges of the form "decrypt this encrypted message" are a sure sign that you are not understanding the basics of how cryptanalysis, and cryptography in general, work. Start by looking up Kerkchoffs Law.
Aug
23
comment How to sell a new idea – “100% secure communication”, feedback wanted
Also, is your solution TLS? If it's not, why not use TLS? If you don't understand the benefits - and the problems - of TLS (or any of the other existing cryptoprotocols), then you are guaranteed that you are either doing it wrong, or doing it oh so very, very wrong.
Aug
23
comment How to sell a new idea – “100% secure communication”, feedback wanted
Is there a question here?
Aug
18
comment Online Marketing company want me to share my Google Account login details?
Can you not create a new account (in your google apps domain) for the marketing company, and give that account access to the MyBusiness and other company Google+ pages? (I am not familiar with those services...)
Aug
18
comment Online Marketing company want me to share my Google Account login details?
See also my answer at Is it OK to tell your password to your company's sysadmin?. Different context, same answer - passwords are NEVER to be shared.
Aug
18
revised How does Windows 10 allow Microsoft to spy on you?
Emphasized that this all only applies to the preview, and is no longer relevant to release versions.
Aug
16
comment How to ensure message integrity for ciphers created via RSA algorithm
Are you asking, what are the methods I need to call to perform an integrity check? If that is your question, then I agree that it should be migrated to SO. On the other hand, if you're asking, what is the right way to do this - then it should not be migrated, it would be answered here. (Hint: Just use TLS.)
Aug
16
reviewed Leave Open How to ensure message integrity for ciphers created via RSA algorithm
Aug
16
comment XKCD #936: Short complex password, or long dictionary passphrase?
@Cyberherbalist It's not about having haters, it's about being a better marketer than anything else, even if he doesn't understand the words he is repeating out of context, or making up altogether. But here is really not the place for a discussion on his expertise...
Aug
13
revised How does Windows 10 allow Microsoft to spy on you?
Removed tinfoil hattery, irrelevant ranting, and general Stallman-esque vitriol.
Aug
13
revised How does Windows 10 allow Microsoft to spy on you?
edited title
Aug
12
awarded  Nice Answer