990 reputation
69
bio website
location Orbiting the Sun (More precisely: probably Prague)
age
visits member for 3 years, 11 months
seen Oct 29 at 16:06

Rents brain for food.

Programmer by day, OpenStreetMap enthusiast by night, bicyclist in-between.


Aug
14
comment Is it possible for a phone to be transmitting even while turned off and the battery removed?
If there's another battery (or a supercapacitor, or whatever), it's possible to remove the first battery, but then the question becomes "with two batteries, can they be hot-swapped?", which is quite a different question ;) So - no, without a source of power, it is not possible to draw power necessary for functioning, certainly not longer than a few seconds. Now, the real question appears to be "is it possible to hide another battery inside the device?"
May
9
comment Why is php not used for banking sites or for a banking transaction?
@user24408: Speed doesn't come into the equation here - with all the options PHP now has, it's as good as compiled (HHVM); for most ops, the system will be database-bound or io-bound anyway. I posit the maintenance cost is the actual issue, not actual performance.
Mar
27
comment QR codes that can't be copied - possible?
My hand-held device uses natural light. It also contains, besides the QR-code app, a Camera app (incidentally, most devices also access the same software stack for camera and QR scanning) - voila, I have overcome this barrier by making a photo, using the same smartphone I might use for scanning (and many QR apps can work on any image - so now I'm able to QR-scan this image anywhere, anytime).
Mar
26
comment How the shopkeepers are getting MAC address of wifi enabled smartphones
@spartan: See security.stackexchange.com/a/54068/884
Mar
25
suggested suggested edit on Why does Evil twin works?
Feb
24
comment Is BitTorrent Sync a spyware?
Note that measuring data volume is not the same thing as having access to it: with correctly used strong crypto, a third party could still see that 20 GB are stored, but won't have a clue what the data is.
Feb
22
comment Retrieve files from possibly infected USB
@Peteris: For various reasons (e.g. Windows hiding file extensions), I believe this to be an over-optimistic assumption.
Jan
12
awarded  Necromancer
Dec
30
awarded  Yearling
May
12
comment Is it compulsory to have https on e-commerce site?
@Harlandraka: No idea, sorry.
May
10
comment Prove that you deleted the file
Note also that "special knowledge" could be as simple as "if you can't get the data out of the computer, just take a photograph of the computer screen while content is displayed." Sometimes the low-tech methods work best ;)
May
8
comment Is it compulsory to have https on e-commerce site?
Unless you're Google-sized, Moore's Law has obliterated the "speed overhead" problem sometime during the last decade. And if you are Google-sized, there are also ways to overcome the "speed" issue. TL;DR: "HTTPS is slow" is just an excuse nowadays.
May
8
comment Is it compulsory to have https on e-commerce site?
@Harlandraka: That would depend on many things - jurisdiction of the shopper, your jurisdiction, and most importantly, how good your and the shopper's respective lawyers are ;) In other words, "maybe."
Apr
23
awarded  Nice Answer
Apr
22
answered Does password-protecting a server's BIOS help in securing sensitive data?
Apr
5
comment Security seals and the “perception of safety”?
@MayankSharma: Do you trust "Agencia Catalana de Certificacio"? Do you trust "AOL"? Maybe, maybe not. I have randomly picked these ones out of the looong list of "trusted CAs" that ships with Firefox; very few people are aware of this list, and the implicit trust they are putting into the CAs (and the browser which ships with them). It only takes one of the CAs on the list to go rogue; this has happened multiple times. The point is, the whole system is already broken; it didn't come down yet only because nobody cares. (Etilasat?DigiNotar?Comodo?No change since then...)
Mar
29
comment SSH password vs. key authentication
.ssh/authorized_keys is but the most common way of managing the public keys (and a matter of setting up sshd_config); there are various centralized solutions in use.
Mar
29
comment Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?
@Smit Johnth: To be honest, I don't know; it's been a while since I've used a Windows computer of my own; from the cursory use I've had, I haven't seen this option with the default wifi manager in Windows 7. In other words, I can't rule out existence of such option on Windows, but I can't confirm it, either.
Mar
27
comment Email instead of username
Case-sensitivity in local part is uncommon nowadays, but not improbable. Bob@example.com and bob@example.com may be, as far as the respective RFC goes, two different e-mail addresses. It is unwise to assume identity because it's less work for me, never mind that the RFC specifically prohibits this: "the local-part MUST be interpreted and assigned semantics only by the host specified in the domain part of the address." You seem to be contradicting yourself: should the local part be munged ([bB]ob), or not (bob+something)?
Mar
27
comment Email instead of username
I strongly object against the notion that stripping an arbitrary part from the e-mail address "sanitizes" it. While it is true that many e-mail systems treat the + character as special, this is merely an informal convention. What's next, "sanitizing" the address by removing the all the characters a, '4', '%' and Q? (a completely arbitrary choice)