Reputation
119,196
Next tag badge:
97/100 score
25/20 answers
Badges
14 226 353
Newest
 Nice Answer
Impact
~4.4m people reached

Mar
3
answered Client verification with PKCS#7
Mar
2
awarded  Enlightened
Mar
2
awarded  Nice Answer
Mar
2
awarded  Nice Answer
Mar
2
answered Understanding how does certificate validation work
Mar
2
comment Is it safe to allow www-data to execute privileged commands?
If you remove the NOPASSWD: then it is somewhat better because sudo will require that you type the password for the www-data account before actually granting the extra privileges. But this raises the question of how the invoking code obtains the password in the first place -- if it is hard-coded in the PHP source, then things are just worse, not better.
Mar
2
comment Password based Asymmetric Key generation
The primes are "just there", mathematically speaking. See this answer.
Mar
2
answered How does RSACryptoServiceProvider generate keys
Mar
1
awarded  Nice Answer
Mar
1
answered Password based Asymmetric Key generation
Mar
1
answered Exploit Stack Based buffer overflow (x64) while controlling rbx register
Mar
1
answered Cache Bank conflicts and CacheBleed: What is there to worry about?
Mar
1
comment TinyCA missing CRL information in root and leaf certificates
"Netscape CA revocation URL" is reminiscent of the old Netscape-specific extensions that are not the standard extension (such as CDP), and are simply ignored by most modern software. Maybe the URL was stored in the wrong place in the certificate.
Mar
1
answered TinyCA missing CRL information in root and leaf certificates
Mar
1
answered Is this authentication scheme secure?
Mar
1
awarded  Good Answer
Mar
1
awarded  Guru
Feb
29
awarded  Nice Answer
Feb
29
awarded  Good Answer
Feb
29
awarded  Enlightened