12,085 reputation
23890
bio website neal.mcburnett.org
location Boulder, CO
age
visits member for 3 years, 11 months
seen Oct 15 at 19:28

I like to engage in "Technology Serving Community" via free software.

Consultant, Ubuntu member, Wikipedia contributor since 2002, ElectionAudits developer, Boulder Community Network co-founder, Internet2 consultant for IDtrust, author of pgpstat, Android enthusiast, ex-Bell Labs web/security/standards maven....

See my web site for way more: http://neal.mcburnett.org/


Oct
14
awarded  Nice Answer
Oct
7
comment Describe an example of indistinguishability obfuscation or functional encryption
Is F really the same when acting on both encrypted and unencrypted data? Or is it something like F-prime that is applied to the encrypted data so that it all works?
Sep
30
awarded  Explainer
Sep
27
awarded  Good Answer
Sep
24
awarded  Autobiographer
Sep
22
comment What voip client support manual encryption?
Most of the clients that support encryption in the page you link to do the VOIP part via SIP. But yes - with SIP you do have to make sure to use a client that supports and employs encryption, and does so effectively (not an easy thing). Whether SIP is encrypted by default depends on the client. The SIP standard (RFC 3261 - SIP: Session Initiation Protocol) discusses how to get end-to-end security. That is something that Skype can't be trusted to do, though they do seem to provide some degree of encryption against some (but clearly not all) attackers.
Sep
22
awarded  Nice Answer
Sep
21
revised Most secure password hash algorithm(s)?
add better tag
Sep
21
comment Gold Standard for password hashing
@Sammitch As Polynomial says, SHA1 is fine for this purpose, though hash function agility is indeed a good thing.
Sep
21
revised Gold Standard for password hashing
edited tags
Sep
19
comment What voip client support manual encryption?
Given your own point about Skype being proprietary, and knowing that it is controlled by Microsoft who has been forced to cooperate with the NSA, why would you speculate that it is "safer than SIP", which is an open protocol with many clients, some of which are very good and open source?
Sep
15
awarded  Popular Question
Sep
8
reviewed Leave Open Tools to analyze Hooks on Windows 7 / 2008, x64 platform
Sep
8
reviewed Leave Open Tools for performing HTTP FLOOD attack?
Sep
8
reviewed Leave Open Classical Cryptography Tools
Sep
8
reviewed Reviewed Is it wrong to root login with SSH?
Sep
8
comment Is it wrong to root login with SSH?
Welcome to the site and thanks for the answer :) But can you include here the gist of the instructions that seem relevant? For the convenience of our readers, and since pages on other sites may go away at any time, we ask that you please give a full answer here, and just provide links for background info and credit.
Sep
8
reviewed Close What hash version is implemented on ThePirateBay.se? SHA-1 or MDA-5?
Sep
8
reviewed Close Next steps to get rid of malware?
Sep
8
reviewed Close Does Ally Bank's trusted image system actually make login safer?