59,894 reputation
471154
bio website
location
age 68
visits member for 2 years, 6 months
seen 14 mins ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Jan
21
awarded  Good Answer
Jan
20
awarded  Nice Answer
Jan
20
answered Is it safe to write the salt AND/OR the IV at the beggining of an encrypted file?
Jan
20
awarded  Revival
Jan
20
answered How is the widespread design of ATM rooms more secure?
Jan
20
answered Password stretching using concatenation of hashes
Jan
20
comment Does sending two different hashes of the same password reduce security?
@ScottHelme: we are talking about how the "long_string" makes hashing slower for each instance. But SHA-512 processes data sequentially, with a running state; if the "long_string" comes first then that initial processing can be mutualized. If unsure try to implement SHA-512 from the specification (it is not hard, and it is a good pedagogical exercise).
Jan
20
awarded  Nice Answer
Jan
20
answered Modifying SSL Certificate once created, Multi domain
Jan
19
comment Does sending two different hashes of the same password reduce security?
I have implemented and run SSL servers on a 33 MHz ARM CPU and in less than 20 kB of RAM (yes, kilobytes). I simply don't believe that your service is "too small for SSL".
Jan
19
answered Does sending two different hashes of the same password reduce security?
Jan
19
answered Is Java relevant to Information Security?
Jan
19
answered Is there a chance USB files once opened by TV, PC etc. have any footprint, backup or residue files left on the hosting device it worked on?
Jan
17
answered Inversed Data Direction on the Stack
Jan
17
answered Is using an SSL Session ID along with a cookie based session verification more secure or not really?
Jan
16
answered Android and FIPS
Jan
16
answered How to validate a client certificate
Jan
16
answered Identify HTTPS vs Application SSL Traffic
Jan
16
answered Server not requesting for certificate in SSL handshake
Jan
16
comment What are good approaches to modify TLS/SSL trafic in order to make a HTTP bot?
Yes, creating your own root certificate is easy; OpenSSL can do that.