60,094 reputation
471154
bio website
location
age 68
visits member for 2 years, 6 months
seen 8 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Apr
15
comment One computer with multiple OSs in different drives
A virus which infects hardware (e.g. the motherboard) must do things which are specific to that hardware. That does not mean that it does not happen... only that it will entail more work for the virus writer.
Apr
15
answered One computer with multiple OSs in different drives
Apr
15
answered Issues of using HOTP w/ iteration window
Apr
15
answered When using PGP/GPG, is it safe to use the same public/private key pair on multiple computers for the same person?
Apr
15
revised Should I change all my passwords due to heartbleed
added 4956 characters in body
Apr
15
revised Are there “secure” languages?
Added some considerations on safe memory management in C.
Apr
15
comment Why are security-crucial software written in unsafe languages?
Big integers are not easy to use in the absence of automatic memory management (the GC). Many people also fear that making the default "int" type a big integer would incur intolerable overhead (which is mostly untrue in practice, if you do it properly, i.e. encoding small integers as sort-of pointers). Python, and some Scheme dialects, use big integers by default.
Apr
15
comment Why are security-crucial software written in unsafe languages?
In my case, the JVM (that I wrote my self) was of the AOT kind: translation of bytecode (not Java source) to C code, compilation with a C compiler. Compared to native code for computing intensive tasks (e.g. encryption), the slowdown is a factor of 2 to 4. For big integers too -- at least on 32-bit ARM and PowerPC; on 64-bit x86, the factor rises to about 6 due to the 64x64->128 multiplication opcode that cannot be used from Java (whose biggest integer type is 64 bits).
Apr
15
answered TLS 1.2 Server certificate and signature_algorithms
Apr
15
revised TLS 1.2 Server certificate and signature_algorithms
added 15 characters in body
Apr
15
comment Why are security-crucial software written in unsafe languages?
The hardware was a HSM, it had a cryptographic accelerator for RSA. "Native math" would not have been sufficient, by far. Note that the symmetric cryptography of the SSL connections was pure Java.
Apr
15
awarded  Good Answer
Apr
14
answered If bruteforcing a password goes aaa, AAA, aab, AAB, etc, all the way to ZZZ, wouldn't ZZZZZZ be the most secure password?
Apr
14
comment Are there “secure” languages?
But you had that kind of box about the "standard C library"... which is formally part of the language. Similarly, you never had a popup about the Java compiler being insecure, only the runtime support code.
Apr
14
awarded  Nice Answer
Apr
14
answered Should service accounts be set to never lock out
Apr
14
answered Client authentication flaw in old Netscape SSL protocol
Apr
14
answered Advantages of one time pad
Apr
14
answered Are there “secure” languages?
Apr
14
answered list of PKCS7 certificate file extensions