KeithS

2,684 reputation

316

bio	website
	location
	age
visits	member for	1 year, 2 months
	seen	19 hours ago
stats	profile views	47

	2,684 reputation	bio	website		visits	member for	1 year, 2 months
316 badges		location			seen	19 hours ago

summary answers questions tags badges favorites bounties reputation activity

348 Actions

suggestions reviews revisions comments badges posts accepts all

Apr 9	answered	How does hashing work?
Apr 5	comment	DDoS - Impossible to stop? Short and sweet, but somewhat incorrect. Most DDoSs are the result of a botnet. Botnets, however massive, are a subset of the Internet, that attack by making sustained, rapid requests, often in a manner differing significantly from legitimate traffic (no legitimate user sends SYN after SYN without completing the handshake). More sophisticated attacks that turn legitimate users against a site (DNS hacking, malicious Slashdot-style linking) are harder to defend against, but also harder to pull off and control (as in Tom Leek's analogy; you set it up and hope for the worst).
Apr 5	comment	DDoS - Impossible to stop? @makerofthings - Your ISP is still trying to send all other traffic to you, and you still have to perform some cursory inspection of the packet to determine it's a rotten egg. It's a losing game; a coordinated DDoS attacker can add zombies more easily than you can reduce the time/effort needed to reject their packets.
Mar 21	revised	Future proof encryption possible in theory? added 9 characters in body
Mar 20	awarded	Citizen Patrol
Mar 11	revised	Banking application login leaks information added 1 characters in body
Mar 8	awarded	Yearling
Mar 6	answered	what is the difference between a mac and a digital signiture
Mar 6	comment	Could once infected machine be ever trusted again? Regarding the last two sentences - While I totally get the point, I'm not sure that's fair; the whole point of modern computer/OS design is that you don't have to know the bits and bytes at the hardware layer in order to write quality end-user software. Saying that anyone who doesn't know how to store a virus on a keyboard's EEPROM shouldn't write software is like saying that anyone who can't pick a deadbolt shouldn't be replacing the exterior door of a house. Two completely different skillsets are required, and while one person may possess both, one does not require the other.
Mar 6	revised	How do I transfer the HMAC? added 565 characters in body
Mar 6	revised	How do I transfer the HMAC? added 565 characters in body
Mar 6	answered	How do I transfer the HMAC?
Mar 6	revised	Implementation review - Independent key, admin side and user side added 5 characters in body
Mar 4	answered	Basic Algebra and How it Applies to Information Security?
Feb 22	awarded	Nice Answer
Feb 21	revised	The security level in hash function added 31 characters in body
Feb 18	answered	Encrypt data within mobile app and send to web service
Feb 18	comment	Encrypt data within mobile app and send to web service When (not if) your application is reverse-engineered, you will have zero control over what string-generation function, or even what encryption function, will be used. You can trust your own servers. You can trust an end user after they prove they are who they say they are beyond a reasonable doubt. You can never trust the client software, or the machine it runs on.
Feb 18	revised	Strategies to store/remember very long password? added 125 characters in body
Feb 18	comment	Strategies to store/remember very long password? True, but a OTP is not a "password". This question asked for advice regarding passwords, so it's a different question that I answered differently; I made the (safe) assumption of using 128-bit symmetric encryption, which would be safe enough for 100 years assuming the cipher primitive used does not demonstrate a weakness in that time.