|
1d
|
|
reviewed | Leave Open Touch Screen Password Guessing by Fingerprint Trace |
|
1d
|
|
reviewed | Leave Open Bot detecting by considering request inter-arrival time |
|
May
14 |
|
reviewed | Approve suggested edit on What are the biggest unsolved problems in IT Security? |
|
May
14 |
|
reviewed | Approve suggested edit on What kind of attack was this? |
|
May
10 |
|
answered | Is showing your IP address in the URL a bad practice? |
|
May
8 |
|
reviewed | Approve suggested edit on Security of viewing a website containing Java applets offline |
|
May
8 |
|
awarded | Notable Question |
|
May
8 |
|
awarded | Enlightened |
|
May
8 |
|
awarded | Nice Answer |
|
May
7 |
|
reviewed | Approve suggested edit on What access does UK Police currently have to ISP logs, and what information can said logs provide? |
|
May
7 |
|
reviewed | Approve suggested edit on How does a firewall help to protect a server? |
|
May
6 |
|
comment |
session keys in an online e-voting system Server1 can just generate a large random number as token and send a list of valid tokens to Server2. Alternatively Server1 can use a HMAC. Please note that this is voting scheme in not in compliance with the requirements of democratic elections for multiple reasons: The voter cannot prevent Server1 and Server2 from cooperating to reveal his vote. Furthermore a voter cannot verify that the counted votes match the actual votes. |
|
May
6 |
|
comment |
session keys in an online e-voting system The idea behind this concept is to have server1 verify the identity of the person in order to prevent a voter from voting twice. In a real election, this is done by the voting committee. Server1 hands out a token that can be used to vote exactly once, like the empty piece of paper on which you mark your vote. Server2 accept the token and the vote, like the ballot-box. |
|
May
6 |
|
reviewed | Approve suggested edit on Indistinguishability attack example |
|
May
5 |
|
reviewed | No Action Needed What should be the size of a Diffie-Hellman private key? |
|
May
4 |
|
reviewed | Leave Open A filesystem with chunks hidden all over the internet? |
|
May
3 |
|
reviewed | Leave Open Certificate == signed public key |
|
May
3 |
|
reviewed | Reviewed what is the difference between Scrypt and PBKDF2 |
|
May
3 |
|
reviewed | Reviewed Attacking historical ciphers methodology |
|
May
3 |
|
revised |
Attacking historical ciphers methodology deleted 27 characters in body |