Reputation
2,415
Top tag
Next privilege 2,500 Rep.
Create tag synonyms
Badges
9 17
Impact
~156k people reached

Jul
24
awarded  Citizen Patrol
Jul
21
awarded  Caucus
Jul
7
awarded  Enlightened
Jul
7
awarded  Nice Answer
Feb
13
awarded  Yearling
Jan
19
comment How to generate cryptographically strong pseudorandom data very rapidly?
@supercat I don't think it's necessarily an advantage that TRNGs don't have an internal state it needs to keep secret - mainly because TRNGs use environmental data to produce random output, so if you have physical access/control over the environment you can affect the output in some way (just as you might predict the output if you could get that seed data).
Sep
24
awarded  Autobiographer
Jul
17
comment How can I prevent my kids from bypassing my computer restrictions?
This is definitely a parenting question. Find a creative way of encouraging this and you could be raising the next Bill Gates :-) (or at least a talented IT professional)
Jul
1
comment Where do you store your personal private GPG key?
@johannestaas It's straightforward to encrypt the keys before backing them up although I'd prefer not to rely on remembering the pass-phrase. A backup in a physically secure location trumps encryption, IMO. You could use an open-source QR reader on an off-line device and then destroy all the data on it before putting it on-line again.
May
15
comment SSL/TLS version switch over reason
Can you log the negotiation in (one of or both of) your respective libraries? You should be able to retrieve details more easily that way. You can only speculate when you have just network data.
May
15
comment Encrypting files on Google Drive
@Celeritas You are wanting something illogical. You are saying you don't want to trust a computer that you want to use sensitive files on. Yes it's annoying when you can't have both convenience and confidentiality, but that is the way security works - it's a constant trade-off of these two elements. To be blunt, you simply have to get over it.
May
14
comment Is my ISP doing a port scan on my computer?
Thanks for your contribution. I advise this is investigated before sending abuse notices.
May
14
comment Is my ISP doing a port scan on my computer?
It is not impossible for a single person to control more than one IP address. You need to collect a list of the addresses and report them.
May
14
answered Is my ISP doing a port scan on my computer?
May
14
comment Strange logs in apache from bing/facebook
Or the IP address was previously used.
May
14
comment Is my ISP doing a port scan on my computer?
It is not usual for data to be incoming from port 443. Please show more of the source IP (first three segments).
May
8
comment Is it a bad idea to share the ssh host key in a diskless environment?
Well what that means is that if you think you're connecting to a specific one of those student workstations, you could actually be connecting to any other one of them, if they're redirecting traffic, since it's the same keypair. But not sure what benefit that would give them, unless they want you to get a headache. I cannot see much of an issue with this to be honest. There are probably more serious security issues in such an environment, if disk data is being transmitted in plain-text.
May
7
comment How to validate the confirmation link received when publishing a new PGP key?
You need to import both public and private keys. So: gpg --import public.asc and gpg --allow-secret-key-import --import private.key. You can use those keys once imported, as if you'd generated them locally.
May
7
reviewed Approve What's the meaning of the term “ad-hoc MAC” (Message Authentication Code)?
May
7
comment How to validate the confirmation link received when publishing a new PGP key?
@blacksensei That's absolutely correct! Key servers just attempt to make things more convenient. They're like an address book. There can still be houses, even if there is no entry in the address book.