60,094 reputation
471154
bio website
location
age 68
visits member for 2 years, 6 months
seen 2 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


4h
answered What are the OpenSSL standard Diffie Hellmann parameters (primes)?
6h
answered Evaluation of cryptosystem for authentication and keyexchange
1d
answered How does the NSA restrict public access to cryptography?
2d
awarded  Enlightened
2d
awarded  Nice Answer
2d
comment Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
When you use a proxy, you are not using a fake IP address -- you are using the real IP address of the machine which does the proxying work for you. Here, we are talking about an attacker who could take the control of an infrastructure router and can see IP packets destined for a whole network (not the one where the attacker has his own machine). This is more power than is available to the bulk of amateur attackers.
2d
answered Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
2d
awarded  Nice Answer
2d
awarded  Custodian
2d
reviewed Reject suggested edit on Any known protocol for establishing trust between an inherently untrustworthy source and a server without a 3rd party?
2d
answered Any known protocol for establishing trust between an inherently untrustworthy source and a server without a 3rd party?
2d
comment How many Stack Exchange logins should I have?
The logic is simple: if you want to minimize the risks of hostile hijack, have only one login. If you want to minimize the risks of being locked out, have at many as possible. This is a trade-off, and only you can make that decision. (However, one possible "login" option is through stackexchange themselves, which is unlikely to close independently of the site itself, so maybe "just one, the one provided by stackexchange" would be the optimal spot.)
2d
answered How many Stack Exchange logins should I have?
2d
answered Why is the SSL handshake not shown in Wireshark?
2d
answered X509Certificate - How to set validation Policies?
Apr
16
answered How does SFTP function without a manually generated public/private key pair
Apr
16
answered Is it possible to sign/verify a key-pair?
Apr
16
answered Why do some websites need time to log you in securely, while others can do it instantly?
Apr
15
revised Issues of using HOTP w/ iteration window
added 1904 characters in body
Apr
15
comment One computer with multiple OSs in different drives
Actually flashing the BIOS does not require a reboot; it just is that the BIOS reflashing utilities prefer it when there is no running OS at that time (to avoid untimely accesses), and the post-flash reboot is to make sure that the new BIOS code is used. However, the hardware itself has no notion of a "reboot" and warm-flashing is possible -- not recommended, but virus writers don't like to play safe anyway (especially with your hardware).