Reputation
23,644
Top tag
Next privilege 25,000 Rep.
Access to site analytics
Badges
26 137 357
Impact
~1.8m people reached

Dec
22
asked What are the security features of the Microsoft PasswordVault class?
Dec
20
awarded  Popular Question
Dec
17
awarded  Publicist
Dec
15
awarded  Announcer
Dec
15
comment Why does not appear the public key from certificate?
I'm learning from the various methods and techniques you shared to get this key. If you want to elaborate that would be quite educational.
Dec
11
asked Can a mobile phone be reliably “nuked from orbit”?
Dec
11
asked How can I inspect/audit an Android phone if it's vulnerable to CVE-2012-4221 (or any other?)
Dec
9
awarded  Popular Question
Dec
8
revised Strategy for electronic document (PDF) signatures
edited tags
Dec
8
comment Why does the issuance speed of a CA depend on the number of certs they have already issued?
Also, I would like to see a EJBCA SQL trace. It could be the ORM (if it uses one) or the driver (Java drivers are terrible)
Dec
8
comment Why does the issuance speed of a CA depend on the number of certs they have already issued?
I would be interested in seeing the Schema and Indexes EJBCA uses. The backend might need maintenance plans, that a suitable DBA can answer.
Dec
8
awarded  Popular Question
Dec
6
awarded  Popular Question
Dec
4
comment What are reasonable alternatives to “Trust this computer” prompts when signing in?
@halfinformed the scenarios you propose (with a questionmark) are possible answers to the problem I'm solving. What options are available? What makes sense?
Dec
3
comment What are reasonable alternatives to “Trust this computer” prompts when signing in?
@NeilSmithline added
Dec
3
revised What are reasonable alternatives to “Trust this computer” prompts when signing in?
added 358 characters in body
Dec
3
asked What are reasonable alternatives to “Trust this computer” prompts when signing in?
Dec
2
awarded  Popular Question
Nov
25
awarded  Famous Question
Nov
25
comment Is there a benefit in measuring randomness? How would it be done?
@schroeder I think it might be a metric when observing blackbox or closed source implementations where the developer says "trust us".