530 reputation
211
bio website
location
age
visits member for 1 year, 6 months
seen 39 mins ago
stats profile views 5

May
10
comment Is OpenGL a security problem?
Very interesting - I knew that it was hard to access the GPU over remote login sessions, but never suspected the reason was security... I also mostly agree with respect to exploiting the GPU being harder than exploiting user carelessness, but still, there is an important distinction - cautious users CAN verify the permissions before installing, but there is no permission for OpenGL.
May
9
awarded  Nice Question
May
9
asked Is OpenGL a security problem?
Feb
20
awarded  Notable Question
Jan
31
awarded  Nice Question
Nov
19
awarded  Popular Question
Nov
9
accepted SRP: Can the client authenticate using only the stored hash?
Nov
9
asked SRP: Can the client authenticate using only the stored hash?
Nov
2
awarded  Yearling
Aug
22
awarded  Scholar
Aug
22
accepted Can an intermediate CA be trusted like a self-signed root CA?
Jul
22
awarded  Nice Answer
Jul
20
awarded  Citizen Patrol
Jul
20
answered How to store salt?
Jul
19
comment Can an intermediate CA be trusted like a self-signed root CA?
Yes, they do. So it really is by design that the clients refuse to use the intermediate certs as roots of the validation process? Is that a consequence of the chain always being anchored by the root CA?
Jul
19
asked Can an intermediate CA be trusted like a self-signed root CA?
Jul
12
comment Is there a way to mitigate BEAST without disabling AES completely?
Are you serious? TLS 1.1 will only be supported in the upcoming version 21 of Chrome and is not supported in Firefox, and I don't even want to begin to research the state of TLS 1.1 support on mobile devices.
Jul
11
asked Is there a way to mitigate BEAST without disabling AES completely?
Feb
5
awarded  Student
Feb
5
asked L2TP/IPsec shared secret: Can it be public?