1,443 reputation
1926
bio website
location Poland
age 28
visits member for 3 years, 5 months
seen Nov 10 at 16:55

Oct
28
awarded  Good Question
Jul
11
awarded  Yearling
Jul
2
awarded  Curious
Jun
29
awarded  Popular Question
May
23
awarded  Notable Question
Apr
27
comment How big salt should be?
@DarcyThomas an implementation of scrypt may generate salt automatically for you but it has to have a source of entropy to generate it from. In languages like Java you have such cryptographically safe source, in pure, standard, portable version of C you don't.
Feb
25
comment What are the pros and cons of site wide SSL (https)?
@Piskvor also, the algorithms we have now are much faster, 3DES is 5 times slower than AES-128, even before using AES-NI (hardware acceleration) and nearly 25 times slower than AES-128 with AES-NI!
Jan
30
comment What is ECDHE-RSA?
@CodesInChaos: just make sure your server doesn't hardcode DH params and allows only 1024bit ones (like apache did before 2.4.7).
Jan
30
accepted Password auditing
Jan
30
awarded  Popular Question
Jan
8
awarded  Famous Question
Dec
8
comment Hardening Linux Server
I'm not claiming that it won't help security-wise. I'm saying that this requires a lot of effort on administrator side and has a higher chance of the server running outdated kernel (because the admin forgot or didn't notice or didn't have time to prepare new config, etc.). The second issue is, if you're depending on 3rd party support, using custom kernel config may be simply impossible.
Dec
6
comment Hardening Linux Server
While installing minimal system and going from there is a good idea, rolling your own kernel will quickly be an exercise in frustration. 1: You'll need to recompile it yourself every time a new security fix comes around. 2: systems running user-compiled kernels (especially ones with custom .config) are in "unsupported" state if you're using RHEL or SLES. Blacklisting mods you don't use is a good idea though.
Nov
27
awarded  Notable Question
Nov
25
comment Designing a cryptographic file-sharing protocol
SHA-512 is faster on 64-bit systems
Sep
29
awarded  Announcer
Sep
24
awarded  Nice Question
Aug
26
comment Is an AIA or CRL useful / required at the Root CA if that Root is used to cross certify another PKI?
@Sid: I've made them using JavE: jave.de
Aug
14
awarded  Nice Question
Aug
6
awarded  Popular Question