Reputation
2,351
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
5 24
Newest
 Yearling
Impact
~96k people reached

Feb
1
comment Law enforcement cracked my phone?
@Robert, android.stackexchange.com/questions/114890/…
Feb
1
comment Law enforcement cracked my phone?
@Vilican but if the PIN is crap, the max tries does not matter.
Feb
1
comment Law enforcement cracked my phone?
How good was your pin? Or were you using a pattern? It is hard to tell what you are even asking. There is no way we can know what the police have tried and whether or not they were successful.
Dec
29
comment Application level proxy on HTML. Capabilities
@e-sushi, that is what I thought. Now the question is, where is the VPN server?
Dec
29
comment Application level proxy on HTML. Capabilities
What is an HTTP VPN-connection?
Dec
15
comment Is 4096 bit good enough to encrypt data?
@StefHeylen I agree. I wouldn't store it either. But, the fact of the matter is that tons of businesses do. Typically for convenience purposes (makes it easier for you to pay them and easier for them to charge you). I wouldn't even store hashes of a credit card number. That could lead to an off-line brute force attack. Credit card number entropy is low enough.
Dec
15
comment Is 4096 bit good enough to encrypt data?
@StefHeylen why not? Tons of companies store credit card info. I would prefer that they didn't, but legally (in the US at least) you can.
Nov
24
comment Is binding all private services to the 127.0.0.1 address and then accessing them via SSH using an RSA key pair of 4096 bits secure?
Is it a private server?
Nov
15
awarded  Yearling
Sep
29
comment How is the server authenticated in ssh?
Yes, for the public key, there is a corresponding private key. There are two ways you can ensure that the server has the corresponding private key, implicit and explicit. Which one is used depends on the key exchange (kex) algorithm. In both cases, however, we are guaranteed that the server must have the corresponding private key.
Sep
29
answered How is the server authenticated in ssh?
Sep
17
comment If a provider sees the last 4 characters of my password, can they see it in full?
For all intents and purposes storing a hash of the last 4 is equivalent to storing plaintext too. With modern GPUs, you could brute force that space in no time.
Sep
1
comment download file/folder anonymously on a ssh session
The method I linked to should also automatically torify scp, so you don't need to specify your private ip address.
Sep
1
comment download file/folder anonymously on a ssh session
Have you tried this: howtoforge.com/anonymous-ssh-sessions-with-tor
Aug
27
comment Cloudflare's free SSL options require trusting them; what could they do to change that?
TLS/SSL has never necessarily meant end to end encryption. For example, I can setup a reverse-proxy load balancer that forwards connections all over the world. The connection to the reverse-proxy load balancer might be over TLS, but the connections to the servers "behind" the reverse-proxy won't necessarily be. And those machines could be spread all over the world.
Aug
19
comment keytool -genseckey -alias TDES -keyalg DESede -keysize 128 works within jre/bin folder but not when the keytool.exe is on another location
Why would you want to create a key with a length that isn't supported with TDES?
Aug
4
comment Why does gpg use /dev/urandom
Do you have a reference for your statement that messages are vulnerable to a low entropy session key (with GPG 1.4)? AFAIK, there is no low entropy attack on 1.4. See Thomas's answer.
Jul
29
comment How can common users defend against the StageFright vulnerability?
Install TextSecure, it isn't vulnerable to this attack. As an added bonus, you can get end-to-end encrypted texts.
Jul
25
comment Why is my internal IP address (private) visible from the Internet?
The second chrome extension you linked to appears to work fine for me.
Jul
24
comment How can I find the origin of an IP address for a relayed IP?
What are you going to do if you find the IP address? Chances are, you can't. It is so easy to cover your tracks when doing something like this. Better just get the backend fixed as soon as possible.