727 reputation
514
bio website
location
age
visits member for 2 years, 6 months
seen Apr 12 at 14:02

email is acidzombie24@gmail.com


Jan
30
awarded  Notable Question
Nov
23
awarded  Nice Question
Oct
24
awarded  Yearling
Aug
6
comment BREACH - a new attack against HTTP. What can be done?
Is it me or does the attack seem stupid? If the attacker can inject code into your browser using a https page wouldn't this attack be the least of your worries?
Aug
2
awarded  Notable Question
Jul
14
awarded  Popular Question
May
9
awarded  Popular Question
May
8
awarded  Taxonomist
Oct
29
awarded  Nice Question
Oct
24
awarded  Yearling
Oct
18
answered Is there any security value of creatively naming folders containing sensitive files?
Sep
24
comment Why do some sites prevent users from reusing their old passwords?
@Joren I just use keys (ssh! github!). I also use passwords like sdfhsdfsdhfhfdfysdfysga and copy/paste them somewhere i consider safe
Sep
21
awarded  Custodian
Sep
21
answered How can I avoid putting the database password in a perl script?
Sep
18
comment How/When do i use HMAC?
If anyone is curious what i wanted to know was hmac is a way to sign data using a symmetrical key. "Its more complex then hashing the message and key together which is not secure" is a bonus.
Sep
18
comment How/When do i use HMAC?
I did and Gilles explained it better.
Sep
18
accepted How/When do i use HMAC?
Sep
13
comment How/When do i use HMAC?
It still isn't super clear but now I figured it out. I use .NET to give me back a hash when signing so I never had to deal with this (I suspect they use HMAC but i am too lazy to confirm atm). Now I understand it as the technique used to sign data. HMAC is simply the hash data you attach with a message for use of verifying that the data has been signed with that key. I always have done signing with an asymmetrical key, I didn't realize it was done with a symmetrical key. I understand now. +1 accepted even tho it it isnt super clear in the answer.
Sep
13
answered In PGP, why not just encrypt message with recipient's public key? Why the meta-encryption?
Sep
13
comment How/When do i use HMAC?
I still don't understand why the key is in the message? Do I not know the public key of the party? If I know the public key then why is the key in the message rather me using the already known key? If I don't know the key then why would i trust that party?