82,218 reputation
9114220
bio website
location
age 69
visits member for 3 years, 2 months
seen 12 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


Nov
7
answered Machine Certificate Key File Artifacts
Nov
7
answered Avast https scanning
Nov
7
answered How is PKI used to encrypt an e-mail for multiple recipients?
Nov
7
comment Completely disabling microphone
Technically no, you cannot trust that. If it can be done from software (BIOS is just software) then it can be undone in software.
Nov
7
answered Completely disabling microphone
Nov
7
answered What security layers of protection are available over XMPP?
Nov
7
awarded  wifi
Nov
6
awarded  Nice Answer
Nov
6
comment Indexing encrypted data for efficient searching
"Padding with a secret value before hashing" really means computing a MAC, so you may as well do it correctly. Use HMAC, which is a deterministic MAC. Using HMAC to generate a search key is equivalent to the "deterministic encryption" solution, except that it uses up an extra column (in particular, if you can search the MAC values then you still leak whether two source values are identical or not).
Nov
6
answered How different should my passwords be?
Nov
6
answered Indexing encrypted data for efficient searching
Nov
6
answered Security benefits by loading modules statically in Apache server
Nov
6
answered Wifi - Can you be traced?
Nov
6
awarded  Nice Answer
Nov
6
revised Does a Virtual Machine stop malware from doing harm?
fixed spacing.
Nov
6
answered Site allows both Partial and Complete password authentication; do they have my password in plain text?
Nov
6
comment How to mitigate the risk of X forwarding?
@SiyuanRen: yes, this would be similar.
Nov
5
answered How to mitigate the risk of X forwarding?
Nov
5
comment Why wouldn't it be great, if HTTP/2 would only allow communication via TLS?
@user2813274: there are products that do interception of SSL traffic by generating on the fly a fake certificate and, technically, doing a MitM attack (this of course requires installation of the corresponding CA certificate in the clients). However, this may incur substantial CPU cost on the firewall/filter side, and it breaks client certificates (although this are quite rare in practice).
Nov
5
awarded  Nice Answer