2018
Nov
21
comment Is it OK that a sysadmin knows the password for a newcomer / act as a user (immediately after his/her recruiting)?
Also mind: Generally company email are property of the employer, not private data from the employee and (depending on other agreements in employment contract, national law, worker council agreements, whatever) the employer (or their representative as admins) always have the right to access it.
May
4
answered How can Twitter and GitHub be sure that they haven't been hacked?
2016
Jun
10
comment Why shouldn't I bring a computer to a key-signing party?
@SnakeDoc this depends on the exact setting. On my local usergroup with a fixed set of regular participants this is less of an issue compared to an international conference with participant from all over the world, which don't know each other with different sorts of ids. Anyways, I just commented on the "no computer" part.
Jun
9
comment Why shouldn't I bring a computer to a key-signing party?
@user2357112 the hard part, which requires people to be in a single room or such, is to verify the person (checking a ID card or something), the actual digital signing can be done by everybody alone easily at some other time.
2015
Feb
21
comment What security risks are posed by software vendors deploying SSL Intercepting proxies on user desktops (e.g. Superfish)
Mind tht the certificate can also serve for signing software installation. Thus an attacker can install malicious software.
2014
Sep
24
awarded  Autobiographer