93,259 reputation
10134257
bio website
location
age 69
visits member for 3 years, 8 months
seen 16 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Oct
31
comment Pattern to allow multiple persons to decrypt a document, without sharing the encryption key?
Arguably, if the K_D key is document-specific, then sharing the key and the document are the same thing. One could say that you cannot force somebody to forget a document any more than you can force him to forget a key. In that sense, "revoking" an access is not well-defined.
Oct
31
awarded  Enlightened
Oct
30
comment Why are drives overwritten three times when being disposed of?
But 20 years ago, indeed we were not using Flash drives... However, even for magnetic drives, remanence has reduced a lot because information density has increased; so when the drive is writing a "1" it already gets something in the 0.6 to 1.8 range or something like that. The small differences that remanence relies upon have been exploited to store more bytes in the disk. That's how we get disks with terabytes of data nowadays.
Oct
30
awarded  Nice Answer
Oct
30
answered Why are drives overwritten three times when being disposed of?
Oct
30
awarded  Good Answer
Oct
30
awarded  password-policy
Oct
29
awarded  Nice Answer
Oct
29
revised What is the solution for handling exceptions in password hashing schemes?
added 283 characters in body
Oct
29
answered What is the solution for handling exceptions in password hashing schemes?
Oct
29
answered Postfix master running as root
Oct
29
comment How to deal with password schemes that can produce weak passwords?
Analogies usually break down when looked at to closely. I don't claim that the bus is a metaphor for passwords; it is only an illustration that we all use probabilistic decisions in all aspects of our lives, so passwords should be no exception.
Oct
29
comment How to deal with password schemes that can produce weak passwords?
Password security is often counterintuitive. But stopping to think in terms of "password strength", instead of "password generation process strength", may help. For instance, every single password value may be generated with a "weak scheme" (for password P, the scheme that always produces P is weak -- since it always produces the same password -- and yet produces P). The key to understanding is that "knownly weak passwords" don't really exist (though we may want to believe it, and usual terminology tends to support their existence).
Oct
29
comment Pattern to allow multiple persons to decrypt a document, without sharing the encryption key?
The OpenPGP scheme is one example; but you still get per-recipient overhead. There are "broadcast encryption" schemes that try to reduce this overhead; but you cannot remove it completely.
Oct
29
answered How to deal with password schemes that can produce weak passwords?
Oct
29
answered Pattern to allow multiple persons to decrypt a document, without sharing the encryption key?
Oct
29
comment Decrypting TLS Traffic
If the client also has a certificate, then in that case there is a private key on the 3DS, and chances are that the server uses it to know that it is talking to a genuine 3DS, in which case your chances of success drop down.
Oct
29
comment Will an ISP give out network/traffic info upon request?
Ah ! I knew someone would complain. What I pick at is the confusion, not the gender. Almost all teenagers go through a phase of confusion about their own sexuality, which translates to obnoxious behaviour and a lot of embarrassment, as is demonstrated by this question. These times are no easier for the parents than the children.
Oct
29
answered Client Hello message suggests cipher suite which is not in the list specified by setEnabledCipherSuites() method
Oct
29
answered Will an ISP give out network/traffic info upon request?