Reputation
Next tag badge:
95/100 score
25/20 answers
Badges
14 198 324
Impact
~3.9m people reached

4h
awarded  Great Answer
10h
answered What is a good way to generate a one time pad, and is this a good way?
21h
awarded  Enlightened
21h
awarded  Nice Answer
Feb
6
comment Difficulty of breaking private key password
Yes, it is based on GNFS; but though the algorithm is quite old (the late 1980s), technology has evolved and many minor but cumulative optimizations were found, that estimates try to take into account. To find the numbers, you have to explore the keylength.com site and play with the various simulators, and possibly read the relevant articles (but that's rather heavy on mathematics).
Feb
4
answered Difficulty of breaking private key password
Feb
4
answered sharing private key sTunnel
Feb
4
answered Can I Prevent Internet Explorer from Storing Login Requests in Memory?
Feb
4
answered Handling session tokens when a users IP changes with extreme frequency
Feb
4
answered Should DSA keys be considered deprecated?
Feb
4
answered Why OpenSSH deprecated DSA keys
Feb
4
comment Why OpenSSH deprecated DSA keys
No, not really a duplicate. The underlying question has not been answered yet.
Feb
3
comment My school wants to keep the details of our door authentication system a secret. Is that a good idea?
@JohannesKuhn: it was the method used where I was schooled; the sysadmin observed the students' activities, and gave the root password to the most advanced. It worked marvels. (And, on a more general basis, this is called a "meritocracy" and is an efficient management method -- in the 13th century, it allowed Genghis Khan to conquer the World.)
Feb
3
awarded  Good Answer
Feb
2
awarded  Nice Answer
Feb
2
comment My school wants to keep the details of our door authentication system a secret. Is that a good idea?
@PyRulez: the operational notion is "review". You want some extra analysis by other people. An open publication can help a lot in getting free reviews.
Feb
2
answered My school wants to keep the details of our door authentication system a secret. Is that a good idea?
Feb
2
answered Is TLS_FALLBACK_SCSV useless if only TLS (1.0, 1.1, 1.2) is supported?
Feb
2
comment Will typing my password twice make it more secure? Or typing each character twice?
Also, the field is very dynamic. E.g. if most attackers try passwords in alphabetical order, then users begin to start their passwords with 'zzz'. Pretty soon, attackers adapt and start doing enumeration in reverse order. Or in random order, which guarantees attackers against worst cases. Trying to play tricks depending on average attacker behaviour tends to backfire. The notion of entropy is what remains when the attacker knows perfectly how you generate passwords -- thus, entropy is the only robust foundation for password security.
Feb
2
comment Will typing my password twice make it more secure? Or typing each character twice?
@immibis: ah, that's the catch. Doing something that "most people won't do" is not the same as doing something that "the attacker won't try first because most people don't do it". Claiming that you gain more than one bit through password doubling is making a bet on the attacker's indifference or incompetence. Unfortunately, this does not hold against the most dangerous attackers, who are after you, personally.