Reputation
4,450
Top tag
Next privilege 5,000 Rep.
Approve tag wiki edits
Badges
1 7 25
Impact
~245k people reached

Aug
28
comment What is the difference between http and https with a self-signed SSL certificate?
Something to keep in mind is that a self-signed certificate can be as secure as an externally-signed one; it simply has no trust chain extending to a common trusted root (like Verisign). If you trust the issuer of that certificate implicitly, you must take the additional step of installing the certificate in your CA store, telling your computer to trust it until you say otherwise. PKIs for corporate networks, in which a self-signed "golden key" is used as a trusted root to sign additional keys for company IT assets, are set up this way all the time.
Aug
28
comment Why is Tor over HTTPs insecure?
Good points all. In addition, it should be mentioned that an entity that controls both an entry and exit node to the TOR onion can trace any message that enters and exits the onion through these nodes. It is believed that the U.S. Government controls many computers acting as Tor nodes, and so has some ability to trace onion-routed traffic.
Aug
28
answered Is a server infrastructure fundamentally possible which the smartest person can't breach?
Jul
2
awarded  Popular Question
Jun
26
revised Encrypted files storage. How to simplify the password management scheme?
added 332 characters in body
Jun
26
revised Encrypted files storage. How to simplify the password management scheme?
added 309 characters in body
Jun
26
revised How does hashing work?
added 54 characters in body
Jun
26
revised Cryptographic algorithm to anonymise strings in pronounceable fashion?
added 86 characters in body
Jun
26
revised Cryptographic algorithm to anonymise strings in pronounceable fashion?
added 467 characters in body
Jun
26
answered Cryptographic algorithm to anonymise strings in pronounceable fashion?
May
28
awarded  Nice Answer
May
14
awarded  Notable Question
Mar
25
answered “It is safe if only Port 443/HTTPS is accessible from Internet!” Is it?
Mar
8
awarded  Yearling
Feb
25
awarded  Enlightened
Feb
25
awarded  Nice Answer
Feb
19
comment Hashing password with salt
Because if the salt value is the same for every hash in the list, it's like having more than one ticket for a drawing; a message you're hashing with that salt could be equal to any of the hash digests, and if so, you've just cracked that hash. If you want to crack another, you just pick up where you left off, because you know none of the messages you've tried have worked yet. This reduces the effective complexity of cracking hashes in the list. With unique salts, you have to focus on each individual hash to crack it, and if you want to crack more than one, you have to start over each time.
Feb
18
answered Hashing password with salt
Feb
4
awarded  Popular Question
Oct
10
answered Is “HTTPS” ~100% secure?