391 reputation
22
bio website
location
age
visits member for 2 years, 4 months
seen Sep 23 '13 at 16:58

Jun
4
awarded  Good Answer
Mar
23
awarded  Yearling
May
9
awarded  Nice Answer
Jan
30
comment Are services like “LastPass” less secure, as they have all my passwords protected by a single password?
@lucas-kauffman With CSP the XSS attack is considerably lower risk. If you have an XSS, it can't be utilized to transport it anywhere.
Jan
29
comment Are services like “LastPass” less secure, as they have all my passwords protected by a single password?
Just FYI Dropbox did accidentally allow anyone in to download your keypass database -- techcrunch.com/2011/06/20/…
Jan
29
comment Are services like “LastPass” less secure, as they have all my passwords protected by a single password?
The pragmatic user would utilize Multifactor to protect their LastPass account - helpdesk.lastpass.com/security-options/…
Jan
29
comment Are services like “LastPass” less secure, as they have all my passwords protected by a single password?
@lucas-kauffman In response to the potential of a future XSS LastPass built CSP ( developer.mozilla.org/en-US/docs/Security/CSP/… ) into its browser extensions in Chrome,Firefox,Safari, Opera and IE (most of which didn't support CSP at all). LastPass analyzed the risk and took a major mitigating step to reduce it's potential impact. It's hard to do JavaScript security well, but we've taken a lot of steps to help mitigate risk.
Jun
8
awarded  Teacher
Jun
8
answered How can I be sure Lastpass really can't access my passwords?