71,323 reputation
790177
bio website
location
age 69
visits member for 2 years, 9 months
seen 14 mins ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Apr
22
awarded  Nice Answer
Apr
22
revised How can I create a password that says “SALT ME!” when hashed?
Added examples of passwords which fulfill the conditions.
Apr
22
answered How can I create a password that says “SALT ME!” when hashed?
Apr
22
answered Do I need an SSL Certificate for a HTTP only site?
Apr
21
awarded  Necromancer
Apr
21
answered How does Shodan crawl internet-connected devices?
Apr
21
comment What are the OpenSSL standard Diffie Hellmann parameters (primes)?
The warning in the documentation is only theoretical. When you try to break discrete logarithm modulo a prime p, the first attempt is very expensive, but subsequent breaks modulo the same prime are much cheaper (you can reuse big parts of the inner attack results). This is the "specialization" they are talking about. However, a 1024-bit modulus appears to be quite beyond the technologically feasible (current record is 530 bits) so even that "first attempt" is out of reach.
Apr
19
answered What are the OpenSSL standard Diffie Hellmann parameters (primes)?
Apr
19
answered Evaluation of cryptosystem for authentication and keyexchange
Apr
18
answered How does the NSA restrict public access to cryptography?
Apr
17
awarded  Enlightened
Apr
17
awarded  Nice Answer
Apr
17
comment Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
When you use a proxy, you are not using a fake IP address -- you are using the real IP address of the machine which does the proxying work for you. Here, we are talking about an attacker who could take the control of an infrastructure router and can see IP packets destined for a whole network (not the one where the attacker has his own machine). This is more power than is available to the bulk of amateur attackers.
Apr
17
answered Does TCP/IP protocol offer a reliable way of determining who the actual sender was?
Apr
17
awarded  Nice Answer
Apr
17
awarded  Custodian
Apr
17
reviewed Reject suggested edit on Any known protocol for establishing trust between an inherently untrustworthy source and a server without a 3rd party?
Apr
17
answered Any known protocol for establishing trust between an inherently untrustworthy source and a server without a 3rd party?
Apr
17
comment How many Stack Exchange logins should I have?
The logic is simple: if you want to minimize the risks of hostile hijack, have only one login. If you want to minimize the risks of being locked out, have at many as possible. This is a trade-off, and only you can make that decision. (However, one possible "login" option is through stackexchange themselves, which is unlikely to close independently of the site itself, so maybe "just one, the one provided by stackexchange" would be the optimal spot.)
Apr
17
answered How many Stack Exchange logins should I have?