810 reputation
147
bio website joshuacarmody.com
location Farmington, MI
age 30
visits member for 1 year, 9 months
seen Feb 5 at 17:37
stats profile views 27

Aug
15
awarded  Yearling
Aug
8
awarded  Popular Question
Jul
16
awarded  Great Question
Mar
4
awarded  Favorite Question
Feb
24
awarded  Notable Question
Jan
4
accepted Do my Android apps use TLS or other encryption when connected to public Wifi? How can I tell?
Dec
30
comment Do my Android apps use TLS or other encryption when connected to public Wifi? How can I tell?
Amazingly, this question is the #7 Google result for "android gmail tls", and I only asked the question 9 minutes ago. Stack Exchange has crazy SEO!
Dec
30
asked Do my Android apps use TLS or other encryption when connected to public Wifi? How can I tell?
Dec
22
comment How does changing your password every 90 days increase security?
+1 for "The attacker might have had access to another password database in which the user used the same password". This is a very real danger. If I can hack an insecure site and discover your password there, then I can access any other systems where you used the same password. Jeff Atwood has even had this happen to him before: codinghorror.com/blog/2009/05/… . Forcing password changes may lower the chances of this happening.
Oct
12
awarded  Teacher
Sep
19
comment Online backup : how could encryption and de-duplication be compatible?
If the technology functioned as you described, would that mean that if your hard drive crashed you wouldn't be able to recover your files from the cloud, as the originals (and probably the keys too) would have been lost to you? If this is the case it would make the service useless as backup, correct?
Sep
19
comment Server side data de-duplication + client-side encryption with private key. Possible with “convergent encryption”?
@this.josh I'm constantly amazed to find out we have StackExchange sites I've never heard of before! :-)
Sep
19
asked Server side data de-duplication + client-side encryption with private key. Possible with “convergent encryption”?
Sep
15
awarded  Popular Question
Aug
16
awarded  Scholar
Aug
16
comment How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
gowenfawr - +1 Thanks very much for your answer. I had heard of asymmetric encryption but had forgot about it when contemplating this question. Your answer was very easy understand. I accepted Thomas Pornin's answer though because I felt he really explained the mechanism thoroughly.
Aug
16
accepted How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
Aug
16
comment How is it possible that people observing an HTTPS connection being established wouldn't know how to decrypt it?
I really like this answer. Is it technically accurate with regards to SSL? If it is, I'm tempted to mark it "most helpful". Gowenfawr's answer is also very helpful and has a lot more votes, but since it has "mangled details" I wonder if this answer is more accurate.
Aug
16
awarded  Good Question
Aug
16
awarded  Nice Question