11,799 reputation
11149
bio website vyznev.net
location Helsinki, Finland
age
visits member for 3 years
seen 2 days ago

I'm a PhD student in biomathematics, working on stochastic individual-based models of evolution in spatially structured populations. My other interests include cryptography, programming games and puzzles, photography and graphic design.

I started programming (in AmigaBASIC) when I was 10 years old. Nowadays, I'm most comfortable using Perl, C and JavaScript. I know Java and PHP too, but I can't really say I like them. I also know some Python, but not as much as I'd like.


CC-Zero Please consider any (original) code I post to Stack Overflow and other Stack Exchange sites to be released under CC-Zero unless stated otherwise. You may do whatever you want with it and don't have to credit me in any way, although of course that would be nice.


I'm the main author and maintainer of the Stack Overflow Unofficial Patch (SOUP), a user script for browsers with GreaseMonkey-compatible user script support (Firefox, Chrome, Opera, possibly Safari) that fixes or works around a number of outstanding issues with the Stack Exchange user interface.

I tend to answer a lot more questions than I ask. Some answers I'm rather proud of:


Aug
9
revised Any problems with this secure time synchronization scheme?
edited tags
Aug
9
wiki
Aug
9
wiki
Aug
9
comment Any problems with this secure time synchronization scheme?
@nightcracker: Our very first meta question was about literature recommendations (but see also this later question). Generally, I'd say the SE network frowns on 1) vague subjective questions with many equally valid answers and 2) answers that only link to external resources. Asking "What's a good book about X?" tends to fall into both categories, whereas "Is there any way to do X?" doesn't.
Aug
9
revised Is this method of deterministically using CBC secure?
edited tags
Aug
9
answered Is this method of deterministically using CBC secure?
Aug
9
reviewed Reject suggested edit on Help me describe/identify this challenge-response protocol/algorithm?
Aug
9
reviewed Approve suggested edit on Could using sequential plaintext uncover AES key?
Aug
9
reviewed Edit suggested edit on How key materials are generated in SSL V3 from master secret
Aug
9
revised How key materials are generated in SSL V3 from master secret
Corrected quote and formatting.
Aug
8
answered Specification of the Megamos crypto algorithm
Aug
8
comment Securing content and login with “same” password
@user12889: If you don't want to allow username sniffing, you could always serve a dummy salt (such as an HMAC of the username using a fixed key) for any unknown usernames. Just try to avoid timing attacks (e.g. by always doing both a DB lookup for the salt and the HMAC calculation for any username before deciding which one to send). That said, generally one ought to assume usernames to be public information anyway; protecting them against guessing may slow down some attacks, but you shouldn't rely on it for any real security. That also means it's OK to leak them if you need to.
Aug
7
reviewed Approve suggested edit on Specification of the Megamos crypto algorithm
Aug
7
revised Securing content and login with “same” password
added 1511 characters in body
Aug
7
comment Securing content and login with “same” password
@D.W.: Agreed, the second scheme is better, if it's feasible. However, then you're no longer really implementing an encrypted file storage server, but simply a generic file storage server with secure password authentication.
Aug
7
revised How HOTP values are validated according to RFC 4226
edited tags
Aug
7
answered How HOTP values are validated according to RFC 4226
Aug
7
answered Securing content and login with “same” password
Aug
4
wiki created nonce description
Aug
4
wiki created nonce excerpt