411 reputation
211
bio website
location
age
visits member for 3 years, 2 months
seen May 22 at 15:55

May
21
comment HTTPS in captive portals and the Apple Captive Network Assistant
@Iszi over HTTPS after verifying the EV certificate to a company I also trust with my credit card at home - sure, why not? I'd love to authorize a one-off payment instead, but alas credit card systems aren't quite there yet.
May
21
asked HTTPS in captive portals and the Apple Captive Network Assistant
May
21
awarded  Citizen Patrol
Apr
29
accepted Are there any known breaches of the .NET AppDomain isolation?
Apr
27
awarded  Yearling
Apr
27
asked Are there any known breaches of the .NET AppDomain isolation?
Apr
20
comment Are cars with keyless proximity-based entry protected against range extenders?
The paper linked in the other answer has demonstrated the attack in multiple cars, so the part of this answer that states it's not practical yet appears to be false.
Apr
20
accepted Are cars with keyless proximity-based entry protected against range extenders?
Apr
20
comment Are cars with keyless proximity-based entry protected against range extenders?
That's a very good paper that addresses exactly this question. Thanks!
Apr
19
comment Are cars with keyless proximity-based entry protected against range extenders?
I'm guessing the close votes are because car entry doesn't sound like IT security. It seems very similar to me to NFC/RFID security, which appears to be on topic, but if the community disagrees, by all means close this.
Apr
18
asked Are cars with keyless proximity-based entry protected against range extenders?
Apr
18
comment What prevents people getting charged over NFC in crowded places?
I'd go for a system that requires me to simply press a button on the card while it's being processed. Just to confirm that someone is physically in possession of the card and intending to pay with it. This would preclude anyone charging me when it's in my pocket, without requiring a pin. A reasonable trade-off maybe?
Apr
18
revised What prevents people getting charged over NFC in crowded places?
added 304 characters in body
Apr
15
comment What is a good algorithm for memorizing a password in a few minutes?
The way our memory works for things like that makes it impossible to remember something like this for a long time. You have to repeat it at certain intervals for it to stick. No way around it other than avoiding to have to remember something in the first place (like some answers suggest).
Apr
15
comment Why does the user pick the password?
The problem with the password manager approach is that either you only have it on your main computer, or you trust a third party with all of your passwords (at least that they have the right crypto). I've not managed to overcome the fear of letting some sync service sync my passwords to everything.
Apr
12
awarded  Excavator
Apr
12
revised Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once?
web archive link because the original is now gone
Apr
12
suggested approved edit on Why is writing zeros (or random data) over a hard drive multiple times better than just doing it once?
Mar
19
asked Why are unsigned Java applications blocked?
Sep
24
comment Why are web servers ubiquitously configured by blacklisting inaccessible files instead of whitelisting the accessible ones?
@Iszi harder than maintaining security-hole-free blacklists? As someone who has made and maintained both, I have to disagree.