209 reputation
13
bio website
location
age
visits member for 2 years, 9 months
seen Jul 21 at 14:32

Oct
13
awarded  Yearling
Mar
30
comment Is it alright to tell everyone your encryption information?
Regarding salting and multiple iterations, they're probably trying to keep the explanation simple enough for non-techies to understand.
Feb
6
comment What to do about websites that store plain text passwords
A password reset link can be configured as single-use. If the legitimate user clicks it first, an attacker won't be able to use it. The link can also expire, in case the user doesn't receive the message.
Feb
3
comment What is the most reliable way to transfer emails without specific recipient support?
The question talks about setting up an email server. The server could potentially decrypt and verify incoming email and then send it to the client unencrypted. Then the clients communicate with the server via SSL. It wouldn't be an ideal solution, of course, but it would be better than nothing.
Jan
31
answered Should I make sure to get all of my OpenPGP uids are signed?
Jan
26
answered What are the best reasons you've heard for not implementing security?
Jan
17
answered Exchanging private keys
Jan
5
answered I'm leaving my job and want to erase as many personal details etc. as possible; any tips?
Jan
3
awarded  Citizen Patrol
Dec
16
awarded  Supporter
Dec
9
comment Can too much web searching be a danger to a security professional?
Is your research part of your job? If not, your company will probably throw you to the wolves if you get arrested or sued. If it is part of your job, that's a good idea.
Dec
9
awarded  Teacher
Dec
9
answered Techniques for Writing Encryption Algorithms (Exclusively For Personal Use)
Dec
9
comment Techniques for Writing Encryption Algorithms (Exclusively For Personal Use)
@Rory Technically, the Caesar cipher (of which ROT13 is a special case) is encryption. It's just pathetically easy to break. And with ROT13, the key (13) is already known.