52,727 reputation
381215
bio website
location
age
visits member for 3 years, 3 months
seen 14 mins ago

12h
comment Running proprietary software on Linux safely
@student, thanks for letting me know! I've updated my answer accordingly. Appreciate it.
12h
revised Running proprietary software on Linux safely
Another link to Plash.
12h
revised Running proprietary software on Linux safely
Updated link to Plash. The link to the user report now seems to be gone forever (alas), so i removed that too. Removed strange HTML comment that didn't seem useful.
2d
awarded  Announcer
2d
awarded  Notable Question
2d
comment Client-server authentication protocol suggestion
Have you benchmarked the performance of SSL? There are a lot of misconceptions and myths about the performance overhead of SSL; SSL can perform quite well. See, e.g., imperialviolet.org/2010/06/25/overclocking-ssl.html
Apr
19
awarded  Notable Question
Apr
18
comment Client-server authentication protocol suggestion
"I know that I could just use SSL, but I would like to (for some reasons)" - What does that mean? Did you leave out some words? What would you like to? And what are the reasons? The first question a security professional is probably going to ask is: why not just use SSL? I encourage you to edit the question to make this clearer, if you'd like to get useful responses.
Apr
18
comment Preventing deauthentication attacks
@DanEsparza, you might be right. I had the impression clients would automatically re-connect, but I could be wrong: I haven't tested it. If you found documentation that says it kicks clients off the network and they staff off, I believe you.
Apr
16
comment What happens if biometric data is stolen?
In addition, we expect people to do serious research on their own before asking, and to show us what they've done. There's a lot that has been written on this subject; you should try doing some searching on this topic before asking. For instance, have you tried Bruce Schneier's blog and books? Have you read through Wikipedia? Have you read standard introductions to biometrics, e.g., in Ross Anderson's Security Engineering book?
Apr
15
awarded  Popular Question
Apr
12
awarded  Nice Question
Apr
9
revised Guidance for implementors of HTTPS-only sites (Server side)
added 312 characters in body
Apr
9
comment Guidance for implementors of HTTPS-only sites (Server side)
@JustinCloud, you are right. There's nothing wrong with loading images from third-party sites (if they are loaded over HTTPS). I will edit my answer accordingly -- thank you for catching that!
Apr
5
awarded  Announcer
Apr
4
awarded  Nice Question
Apr
2
comment Is there any advantage to splitting a password?
Thanks, @Anti-weakpasswords! Good point. I've revised my answer accordingly. I appreciate the feedback.
Apr
2
revised Is there any advantage to splitting a password?
Incorporate comment from Anti-weakpasswords.
Mar
26
awarded  Good Answer
Mar
21
asked Exploitability of use-after-free vulnerabilities