60,654 reputation
475155
bio website
location
age 68
visits member for 2 years, 6 months
seen 2 hours ago

I SHALL DEVOUR YOUR HEART AND FEAST ON YOUR SOUL (so don't bug me).


1d
revised How can I create a password that says “SALT ME!” when hashed?
Added examples of passwords which fulfill the conditions.
Apr
15
revised Issues of using HOTP w/ iteration window
added 1904 characters in body
Apr
15
revised Should I change all my passwords due to heartbleed
added 4956 characters in body
Apr
15
revised Are there “secure” languages?
Added some considerations on safe memory management in C.
Apr
15
revised TLS 1.2 Server certificate and signature_algorithms
added 15 characters in body
Apr
2
revised Get PGP Private Key from RAM analysis RSAKeyFind
fixed formatting of output example
Jan
10
revised Why should the dh keylength match rsa length in tls?
deleted 4 characters in body
Jan
4
revised I don't understand how BIPS got hacked
edited body
Oct
31
revised Is it possible to intercept https traffic and see the links?
added 1026 characters in body
Oct
24
revised How to generate cryptographically strong pseudorandom data very rapidly?
Added reference to `openssl rand` which is simpler and may be enough.
Oct
5
revised Best way to allow sudo access when using ssh keys
added the missing "not" (otherwise the answer makes no sense)
Sep
18
revised Popular Security “Cargo Cults”
added 199 characters in body
Sep
15
revised How does SSL protect against network level attacks on integity?
Fixed the example
Sep
13
revised How trustworthy is SELinux?
added 3 characters in body
Sep
12
revised Hiding backdoors in Open Source code in other languages than C and C++?
Question has changed, so the answer must change too.
Sep
10
revised Does it make sense to choose a longer password than the output of a hash?
Fixed unterminated HTML entity.
Sep
5
revised How can I generate a unique SALT for multiple apps sharing one user database?
added 1307 characters in body
Sep
5
revised What extra protection is added to an REST API over HTTPS by the use of some kind of HMAC?
improved wording
Sep
4
revised Safe to drop email verification when using Facebook login
improved wording
Aug
29
revised There could be still buffer overflows in ex.: C?
added 666 characters in body