Hubert Kario

1,201 reputation

417

bio	website
	location	Poland
	age	27
visits	member for	1 year, 11 months
	seen	Jun 12 at 17:51
stats	profile views	60

	1,201 reputation	bio	website		visits	member for	1 year, 11 months
417 badges		location	Poland		seen	Jun 12 at 17:51

summary answers questions tags badges favorites bounties reputation activity

195 Actions

suggestions reviews revisions comments badges posts accepts all

Jun 12	awarded	Nice Question
May 19	awarded	Nice Question
May 14	awarded	Popular Question
Mar 15	awarded	Notable Question
Mar 13	awarded	Popular Question
Feb 7	awarded	Notable Question
Jan 23	comment	Is it possible to use the aircrack-ng tool to crack a WPA2 Enterprise network? I'm not sure, but I remember reading somewhere about WPA2-PSK vulnerabilities, the same source also claimed that because of relatively fast key rotation in WPA-Ent, they are secure (both 1st and 2nd version). Don't quote me on that though.
Jan 11	comment	How should I store SSL keys on the server? @eicto: like I said, I don't know of any virtual HSMs, creating a custom, networked solution that would support your use case (private keys stored in host machine) is quite easy to create. So, while there may not be ready-to-use solutions, creating one that has the same effect should be easy. Creating one that does implement a PKCS#11 API would be a bit harder, but then it would be a real drop-in-replacement for a real HSM.
Jan 11	comment	How should I store SSL keys on the server? @EICTO: If your CPU/north bridge combo supports IOMMU then you can present the PCI device to the guest, I don't think there are virtual HSMs available, though a networked solution would be quite easy to create (also, "HSM Module" is the same as "PIN Number" and "ATM Machine", please don't say it)
Jan 6	awarded	Citizen Patrol
Jan 6	revised	Is an AIA or CRL useful / required at the Root CA if that Root is used to cross certify another PKI? added 138 characters in body
Jan 6	revised	Is an AIA or CRL useful / required at the Root CA if that Root is used to cross certify another PKI? added 138 characters in body
Jan 6	answered	Is an AIA or CRL useful / required at the Root CA if that Root is used to cross certify another PKI?
Jan 5	awarded	Popular Question
Dec 13	comment	How do i brute-force an SSH-login with only a 4-letter password? can't john the ripper connect to ssh server directly?
Dec 5	accepted	Revoked certificate validation using past times
Nov 30	comment	How does virtualisation (IaaS) protect from CPU microcode updates and firmware changes? What Polynominal said, I'm quite sure that those instructions are ring 0, VMs run in ring 3
Nov 6	comment	Is piping a `ssh-agent` signed message as a password secure? If the attacker can hijack ssh-agent session, he would be able to capture the password and vice versa. So the security of them is comparable. Key based allows for more entropy in encryption key but that's all. There are no alternatives to remote-decryption, there are no universal homomorphic encryption systems.
Nov 3	answered	Is piping a `ssh-agent` signed message as a password secure?
Nov 3	comment	Where to get an SSL certificate for personal website? Java SE 6.0 doesn't trust StartCom certs too, I haven't checked 7.0 but I don't think anything changed.