1,784 reputation
11138
bio website
location B.C., Canada
age 23
visits member for 1 year, 10 months
seen 9 hours ago

16h
comment Is it secure to have two password managers?
@Steven this article explains why Lastpass master passwords aren't susceptible to brute force attacks, even if the hash value is known. helpdesk.lastpass.com/security-options/… (admittedly it is by Lastpass themselves)
16h
comment Is it secure to have two password managers?
@Steven then how does Wuala confirm the password submitted to it is correct?
16h
comment Is it secure to have two password managers?
@Steven well how do you expect to log in if they never remember the hash of the master password?
16h
comment Is it secure to have two password managers?
@Steven where did you hear that the hash of the passwords are stored on the Lastpass servers? According to here only the hash of the master password used to sign in is sent to the Lastpass servers webapps.stackexchange.com/questions/11361/…
19h
comment Is it secure to have two password managers?
@DKNUCKLES "IMO this more than doubles the potential attack vector" then I guess we agree you can't just say the likelihood of having passwords stolen doubles when using two password managers compared to one. " You must now also trust that LastPass has sufficient protocols in place to prevent SE attacks to try to steal your info. Last, and not least, if this info is in the States it then becomes subject to the Patriot Act" what's an SE attack? The passwords are encrypted locally so just because they're stored in US with Patriot Act doesn't matter.
19h
asked Risks associated with compiling open source projects
19h
comment Is it secure to have two password managers?
There're other variables. 1)The speed at which the encrypted passwords can be decrypted given the encryption algorithm used 2)Keepass 2 database uses a key file 3)Since Lastpass is online it maybe they have certain security policies such as blocking an IP address after 5 failed login attempts. Also this is assuming the attacker already gained access to the local computer and can access keypass' database.
19h
comment Is it secure to have two password managers?
But the two password managers have different designs and implementations to say the risk of having the passwords stolen doubles may not be accurate...isn't that presuming the attacker knows a weakness in one of the password managers?
19h
asked Is it secure to have two password managers?
Apr
12
comment Can a VM be used as a home computer?
@user2738698 I guess that could work. The thing I personally wouldn't like is a virtual machine would be slower. So your reasoning is it's easier to backup a VMs master boot record than the host computer's?
Apr
12
comment After restoring from a (valid) full disk backup can malware still persit?
@why should the drive be wiped?
Apr
12
asked After restoring from a (valid) full disk backup can malware still persit?
Apr
12
comment Can a VM be used as a home computer?
I don't understand what you mean by that. Are you sure that's such a thing? If you do a complete restore of backups and the malware is still there that means the malware had been included in a backup or the backup wasn't of the entire disk.
Apr
12
comment Can a VM be used as a home computer?
Why don't you just normally backup the entire computer and forget about VirtualBox?
Apr
12
reviewed Approve suggested edit on Is it safe to generate passwords online?
Apr
11
awarded  Nice Question
Apr
11
comment How to explain Heartbleed without technical terms?
It's almost humerus how Lastpass's heart bleed checker tool detects lastpass as possibly compromised. Does that mean anyone who used lastpass should change all passwords?
Apr
10
comment How to explain Heartbleed without technical terms?
"This would cause the web browser to leak up to 64KB of information to the webserver." what information could this be? For example would it be cached information about websites? Could it be data stored by add-ons, for example pass word managers like lastpass?
Apr
9
awarded  Popular Question
Mar
31
revised What does the “period” of a random number generator measure?
What is meant by "state"?