19,738 reputation
34473
bio website
location
age
visits member for 3 years, 9 months
seen 5 hours ago

Security, Unix, and Networking jack-of-all-trades, master-of-some.


11h
answered Which security documents do providers typically share with their customers?
20h
comment Please critique my encryption scheme for a very small microcontroller
Thanks @cpast, I actually found that as I was searching for the appropriate method for recommending a site be added to the migration list :) :) :)
20h
comment Please critique my encryption scheme for a very small microcontroller
See also Is there any recent cryptographic algorithm especially designed for low-level processors?
20h
comment Please critique my encryption scheme for a very small microcontroller
I'm voting to close this question as off-topic because it belongs on Crypto StackExchange (but that's not a listed migration choice; it should be once it leaves beta!). And whether it's here or there, the answer is going to be "don't roll your own crypto." Surely vetted crypto algorithms exist for the broad niche of limited hardware endpoint!
21h
comment How does Amazon Fire TV know my name/account?
I wonder if they do that when you select gift wrapping at check-out :). "Merry Christmas, Mom! ...no, I have no idea where those personalized recommendations came from!"
2d
revised Secure HTTP headers
Added anecdote where order doesn't matter
2d
answered Secure HTTP headers
Apr
22
awarded  encryption
Apr
21
comment SAD storage prior to authorization
"Has anyone else done research into SAD" is not a good question. Yes, many people have, and learned many things. What do you really want to know? Are you asking if SAD can or can't be written to disk? Can be stored encrypted or unencrypted? Can be stored for 2 minutes, 2 hours, 2 days? In a box? With a fox? In a house? With a mouse? Please clarify the question to reflect what you actually want to know.
Apr
21
answered If TLS 1.2 is considered unbreakable, why do the NSA and other agencies invest in supercomputers?
Apr
20
answered What encoding could this be? Looks similar to base64
Apr
20
awarded  Enlightened
Apr
20
awarded  Good Answer
Apr
20
comment What encoding could this be? Looks similar to base64
The attackers in the Target breach used a modified base64 where they replaced / and + with other characters. You could be looking at something as simple as that.
Apr
19
comment Why do some bank websites use passwords that are not case sensitive?
@MarcvanLeeuwen, companies using mainframes also tend not to use elegant multitier architectures with separate authentication directories. I understand that it seems too strange to be true, but I've seen it in action.
Apr
17
awarded  Nice Answer
Apr
17
awarded  Nice Answer
Apr
17
comment What is the difference between AH and ESP for internet packets authentication and integrity?
Related but not truly a dupe is this question - the answer to your question is probably from the comment "Combined with the ability of ESP to do integrity on its own, AH begins to look like a well-intentioned idea with a limited future..."
Apr
17
answered Why do some bank websites use passwords that are not case sensitive?
Apr
16
comment Could a competent person with Paranoid Schizophrenia get a job in security?
This is a question about mental illness and employment law, not information security, especially where you've explicitly excluded the question of whether this particular job field might have more specific implications for the person's management of their illness (which would itself be an interesting, but unfortunately opinion-based, question). As it is, the question is equivalent to 'Paranoid Schizophrenic get a job in accounting/retail sales/customer support/food court/.../.../...'