89,911 reputation
9126248
bio website
location
age 69
visits member for 3 years, 7 months
seen 14 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Oct
22
awarded  Nice Answer
Oct
22
comment TLS reliance on System Time
I have once used the time to diagnose a network issue (namely, to demonstrate to the network people that yes, their load-balancing box was sending the requests to the wrong server). I have also used it to remotely assess whether the system clock of a given machine was correct or not. (I am often invoked to investigate problems by people who cannot or will not give me access to the actual machines. My job title should be "Oracle".)
Oct
22
awarded  Enlightened
Oct
22
awarded  Nice Answer
Oct
22
answered shred - different device size
Oct
22
answered Should I remotely store my salt?
Oct
22
awarded  Nice Answer
Oct
22
comment Competitor app blocks our app, need a way to bypass their check
Taking technical actions may give a legal argument to your competitors as part of that lawsuit (something like: "See ! They are doing it too !"). Hence my advice not to do it.
Oct
22
answered TLS reliance on System Time
Oct
22
answered Competitor app blocks our app, need a way to bypass their check
Oct
22
answered JSSE recommended cipher suites
Oct
22
answered it is possible to decrypt HTTPS with the (private, public) pair if it uses DHE?
Oct
22
answered Reset Windows trusted certificates store to its default
Oct
22
awarded  attacks
Oct
21
awarded  Nice Answer
Oct
21
answered What is the difference between “key length” and “bit strength”?
Oct
21
answered Is 3DES outdated for message authentication code computing?
Oct
21
comment Encryption algorithm keySize restriction in JSSE 7
My guess is that key size restrictions are enforced only for asymmetric algorithms (RSA, DH... but not AES). Anyway, from a practical security point of view, AES-256 is not stronger than AES-128, since AES-128 is already quite far in the "cannot break it with existing or foreseeable technology" zone. Thus, removing AES-128 support does not make a lot of sense. (Also, AES-256 is about 40% slower than AES-128, so there are actually good reasons to prefer AES-128.)
Oct
21
answered Can Poodle be fixed in SSLv3 or will it go the way of TLS compression?
Oct
21
answered Can any website secured using TLS can be impersonated using a rogue certificate issued by a rogue CA?