Reputation
184,824
Next tag badge:
625/400 score
72/80 answers
Badges
28 400 615
Newest
 Nice Answer
Impact
~7.5m people reached

Aug
26
awarded  Nice Answer
Aug
25
awarded  Good Answer
Aug
20
awarded  Revival
Aug
19
awarded  Nice Answer
Aug
17
awarded  Enlightened
Aug
17
awarded  Nice Answer
Aug
16
awarded  Nice Answer
Aug
14
awarded  Necromancer
Aug
14
revised Is it worth augmenting /dev/random entropy in software?
added 385 characters in body
Aug
13
reviewed Approve Storing SSH private keys on an Android device
Aug
13
comment Is it worth augmenting /dev/random entropy in software?
@MikeOunsworth: the question is not about whether feeding /dev/random with /dev/urandom is a good idea; only whether it is harmful. As long as /dev/urandom is secure, this is harmless (and useless, except if you want to transparently support applications that insist on using /dev/random, and stalling at inopportune times, for no good reason).
Aug
13
answered Is it worth augmenting /dev/random entropy in software?
Aug
13
awarded  Good Answer
Aug
13
awarded  Nice Answer
Aug
12
answered Doesn't hashing passwords server side mean a compromised website could leave passwords vulnerable?
Aug
10
comment PKI usage in a cluster; per application instance or per application?
The more a private element is copied, the less private it becomes. You want to have your key on a lot of devices, but this implies that the key is no more secure than the least secure of these devices. That's your call...
Aug
10
revised Is there a vulnerability when TLS is decrypted, then encrypted with OpenSSL that is vulnerable to BEAST or CRIME?
added 1 character in body
Aug
10
answered Is there a vulnerability when TLS is decrypted, then encrypted with OpenSSL that is vulnerable to BEAST or CRIME?
Aug
9
answered Should I worry about padding oracle?
Aug
9
awarded  entropy