1,313 reputation
1624
bio website
location Poland
age 28
visits member for 2 years, 9 months
seen Apr 11 at 17:33

Feb
25
comment What are the pros and cons of site wide SSL (https)?
@Piskvor also, the algorithms we have now are much faster, 3DES is 5 times slower than AES-128, even before using AES-NI (hardware acceleration) and nearly 25 times slower than AES-128 with AES-NI!
Jan
30
comment What is ECDHE-RSA?
@CodesInChaos: just make sure your server doesn't hardcode DH params and allows only 1024bit ones (like apache did before 2.4.7).
Jan
30
accepted Password auditing
Jan
30
awarded  Popular Question
Jan
8
awarded  Famous Question
Dec
8
comment Hardening Linux Server
I'm not claiming that it won't help security-wise. I'm saying that this requires a lot of effort on administrator side and has a higher chance of the server running outdated kernel (because the admin forgot or didn't notice or didn't have time to prepare new config, etc.). The second issue is, if you're depending on 3rd party support, using custom kernel config may be simply impossible.
Dec
6
comment Hardening Linux Server
While installing minimal system and going from there is a good idea, rolling your own kernel will quickly be an exercise in frustration. 1: You'll need to recompile it yourself every time a new security fix comes around. 2: systems running user-compiled kernels (especially ones with custom .config) are in "unsupported" state if you're using RHEL or SLES. Blacklisting mods you don't use is a good idea though.
Nov
27
awarded  Notable Question
Nov
25
comment Designing a cryptographic file-sharing protocol
SHA-512 is faster on 64-bit systems
Sep
29
awarded  Announcer
Sep
24
awarded  Nice Question
Aug
26
comment Is an AIA or CRL useful / required at the Root CA if that Root is used to cross certify another PKI?
@Sid: I've made them using JavE: jave.de
Aug
14
awarded  Nice Question
Aug
6
awarded  Popular Question
Aug
2
awarded  Popular Question
Jul
19
awarded  Nice Question
Jul
15
revised How to set “Not Before” value to past when creating certificate request
added 1 characters in body
Jul
15
answered How to set “Not Before” value to past when creating certificate request
Jul
11
awarded  Yearling
Jul
7
comment Faster methods for decrypting a TrueCrypt disk, esp. knowing the algorithms used
no, knowing used algorithms won't help. Passphrase generation should be relatively straight forward with python, but as I never used TrueCrypt, I can't really help you with automating it.