1,807 reputation
11239
bio website
location B.C., Canada
age 23
visits member for 1 year, 10 months
seen 10 hours ago

12h
asked Does having a seperate e-mail account only for security, increase security?
1d
comment Is it safe to generate passwords online?
So this got at least 2 down votes. Anyone care to explain?
1d
awarded  Nice Question
2d
comment How different should passwords be?
so you're saying maintain a database of passwords on a smart phone? That itself sounds difficult (again because all the typing of random characters on a small keyboard). Is there an app that lets you type them on a different computer and syncs the database to the smartphone? Sort of like lastpass, but it doesn't have a free android app.
2d
comment How different should passwords be?
2) security.stackexchange.com/questions/17940/…
2d
comment How different should passwords be?
But then you have to have the password manager and database with you. Sometimes this isn't feasible. For example you may not have permission to install the password manager, or you may need to do it too frequently.
2d
comment How different should passwords be?
1) You remember random passwords all the time?
2d
asked How different should passwords be?
2d
accepted Is it bad practice to use the same password on different sites?
Apr
20
awarded  Notable Question
Apr
18
comment Is it secure to have two password managers?
@Steven this article explains why Lastpass master passwords aren't susceptible to brute force attacks, even if the hash value is known. helpdesk.lastpass.com/security-options/… (admittedly it is by Lastpass themselves)
Apr
18
comment Is it secure to have two password managers?
@Steven then how does Wuala confirm the password submitted to it is correct?
Apr
18
comment Is it secure to have two password managers?
@Steven well how do you expect to log in if they never remember the hash of the master password?
Apr
18
comment Is it secure to have two password managers?
@Steven where did you hear that the hash of the passwords are stored on the Lastpass servers? According to here only the hash of the master password used to sign in is sent to the Lastpass servers webapps.stackexchange.com/questions/11361/…
Apr
18
comment Is it secure to have two password managers?
@DKNUCKLES "IMO this more than doubles the potential attack vector" then I guess we agree you can't just say the likelihood of having passwords stolen doubles when using two password managers compared to one. " You must now also trust that LastPass has sufficient protocols in place to prevent SE attacks to try to steal your info. Last, and not least, if this info is in the States it then becomes subject to the Patriot Act" what's an SE attack? The passwords are encrypted locally so just because they're stored in US with Patriot Act doesn't matter.
Apr
18
asked Risks associated with compiling open source projects
Apr
18
comment Is it secure to have two password managers?
There're other variables. 1)The speed at which the encrypted passwords can be decrypted given the encryption algorithm used 2)Keepass 2 database uses a key file 3)Since Lastpass is online it maybe they have certain security policies such as blocking an IP address after 5 failed login attempts. Also this is assuming the attacker already gained access to the local computer and can access keypass' database.
Apr
18
comment Is it secure to have two password managers?
But the two password managers have different designs and implementations to say the risk of having the passwords stolen doubles may not be accurate...isn't that presuming the attacker knows a weakness in one of the password managers?
Apr
18
asked Is it secure to have two password managers?
Apr
12
comment Can a VM be used as a home computer?
@user2738698 I guess that could work. The thing I personally wouldn't like is a virtual machine would be slower. So your reasoning is it's easier to backup a VMs master boot record than the host computer's?