1,794 reputation
11238
bio website
location B.C., Canada
age 23
visits member for 1 year, 10 months
seen yesterday

2d
comment Is it secure to have two password managers?
@Steven this article explains why Lastpass master passwords aren't susceptible to brute force attacks, even if the hash value is known. helpdesk.lastpass.com/security-options/… (admittedly it is by Lastpass themselves)
2d
comment Is it secure to have two password managers?
@Steven then how does Wuala confirm the password submitted to it is correct?
2d
comment Is it secure to have two password managers?
@Steven well how do you expect to log in if they never remember the hash of the master password?
2d
comment Is it secure to have two password managers?
@Steven where did you hear that the hash of the passwords are stored on the Lastpass servers? According to here only the hash of the master password used to sign in is sent to the Lastpass servers webapps.stackexchange.com/questions/11361/…
2d
comment Is it secure to have two password managers?
@DKNUCKLES "IMO this more than doubles the potential attack vector" then I guess we agree you can't just say the likelihood of having passwords stolen doubles when using two password managers compared to one. " You must now also trust that LastPass has sufficient protocols in place to prevent SE attacks to try to steal your info. Last, and not least, if this info is in the States it then becomes subject to the Patriot Act" what's an SE attack? The passwords are encrypted locally so just because they're stored in US with Patriot Act doesn't matter.
2d
comment Is it secure to have two password managers?
There're other variables. 1)The speed at which the encrypted passwords can be decrypted given the encryption algorithm used 2)Keepass 2 database uses a key file 3)Since Lastpass is online it maybe they have certain security policies such as blocking an IP address after 5 failed login attempts. Also this is assuming the attacker already gained access to the local computer and can access keypass' database.
2d
comment Is it secure to have two password managers?
But the two password managers have different designs and implementations to say the risk of having the passwords stolen doubles may not be accurate...isn't that presuming the attacker knows a weakness in one of the password managers?
Apr
12
comment Can a VM be used as a home computer?
@user2738698 I guess that could work. The thing I personally wouldn't like is a virtual machine would be slower. So your reasoning is it's easier to backup a VMs master boot record than the host computer's?
Apr
12
comment After restoring from a (valid) full disk backup can malware still persit?
@why should the drive be wiped?
Apr
12
comment Can a VM be used as a home computer?
I don't understand what you mean by that. Are you sure that's such a thing? If you do a complete restore of backups and the malware is still there that means the malware had been included in a backup or the backup wasn't of the entire disk.
Apr
12
comment Can a VM be used as a home computer?
Why don't you just normally backup the entire computer and forget about VirtualBox?
Apr
11
comment How to explain Heartbleed without technical terms?
It's almost humerus how Lastpass's heart bleed checker tool detects lastpass as possibly compromised. Does that mean anyone who used lastpass should change all passwords?
Apr
10
comment How to explain Heartbleed without technical terms?
"This would cause the web browser to leak up to 64KB of information to the webserver." what information could this be? For example would it be cached information about websites? Could it be data stored by add-ons, for example pass word managers like lastpass?
Mar
31
comment What does the “period” of a random number generator measure?
@CodesInChaos what makes you say that?
Mar
12
comment Encrypting files on Google Drive
Good discussion. If you were to use one of those mentioned services such as Boxcrypt then your unencrypted files will be passing right through there servers. I see no reason to trust Boxcrypt anymore than Google?
Mar
12
comment Encrypting files on Google Drive
1)computer may not have 7-zip
Feb
19
comment Is it bad practice to use the same password on different sites?
But the same username may not be used on another site
Feb
16
comment Is it bad practice to use the same password on different sites?
"What are the odds of someone using the same password but different usernames?" what do you mean? If it's a common password or a week one there is a good chance another person would use this password. On the other hand there are people who do use the same passwords for everything.
Feb
16
comment Is it bad to use the same sequence of characters in each password?
This conversation doesn't really pertain to original question so I opened a new one here
Feb
16
comment Is it bad to use the same sequence of characters in each password?
"Attackers then use these lists to try and find other sites that those people have accounts on" right but this wouldn't be known. If cracked db for xyz.com has been put on the market and a hacker is trying to get into abc.com even if the same individual used the same password on abc.com as they did on xyz.com the attack wouldn't know the username. Or is your scenario supposing they did? Even so it wouldn't be known which sites the individual used the same password/username on.