20,815 reputation
355106
bio website stackexchange.com/users/…
location
age
visits member for 4 years, 5 months
seen 3 hours ago

Moderator♦ pro tempore on French Language, Computer Science and Software Recommendations. I'm also a unix amateur, and a developer on embedded systems with a computer science background and security leanings by trade.

Avatar picture slightly adapted from a photo by Luridiformis (Zonda Grattus).


1d
reviewed Reopen How does Silverlight protect the AES keys it gets from PlayReady?
1d
reviewed Close Url quote escape (whenever I place a quote in the url, it escape it with '/)
Apr
15
awarded  Popular Question
Apr
12
reviewed Approve Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once?
Apr
10
answered OpenSSL implemented AES not according to NIST?
Apr
6
comment What's the safest way to transmit a message to another client through a server hidden from high level malicious users?
I can't write down a 64GB one-time pad. Or store it in a smartcard (which considerably raises the requirements on the attacker compared with a PC).
Apr
6
comment What's the safest way to transmit a message to another client through a server hidden from high level malicious users?
Your risk analysis is completely off the mark. There are known algorithms that the NSA couldn't break in 2012 and is highly unlikely to be able to break now. On the other hand, you've completely bypassed all the risks with the OTP's generation, storage and distribution. I am fully confident in the NSA's ability to infect the OP or the recipient's computer with spyware.
Apr
6
reviewed Reopen What's the safest way to transmit a message to another client through a server hidden from high level malicious users?
Apr
4
comment Inspecting every packet leaving the system for sensitive information ?
Accidental as in an employee accidentally sends the customer list to joe@competitor.com instead of joe@yourcompany.com. Deliberate as in a disgruntled employee sends the customer list on wilileaks.org over a VPN that they installed for this purpose.
Apr
3
comment Inspecting every packet leaving the system for sensitive information ?
Are you concerned about accidental leaks or about malicious leaks? These are completely different scenarios.
Apr
3
reviewed Leave Open Inspecting every packet leaving the system for sensitive information ?
Apr
3
reviewed Close What is the most successful virus/rootkit?
Apr
3
reviewed Close What are the implications of using OAUTH? Do the positives outweigh the negatives?
Apr
3
reviewed Leave Open Is my server being used as a proxy or being attacked?
Apr
3
reviewed Close What is the most secure way to protect a custom CMS from infiltration?
Apr
3
comment Would the authorities in my college be able to see what websites I accessed through tunneling(SSH)?
@Xander Not really: that earlier question was about a computer installed by central IT, and about a VPN (which is different from SSH, in particular as DNS requests are usually tunneled through the VPN). We may have a duplicate but that isn't it and I can't find anything in the sidebar either.
Apr
3
reviewed Leave Open Would the authorities in my college be able to see what websites I accessed through tunneling(SSH)?
Apr
3
reviewed Close Bypass browser requirements to see exploit code
Apr
3
reviewed Close Detecting malicious domains/URLs
Apr
3
reviewed Close What exactly is shellcode?