590 reputation
1719
bio website gaman.pl
location Upper Silesia, Poland
age 36
visits member for 3 years
seen Jul 27 at 5:59

I'm just an average person, that uniquely combines strict, engineering mind with a non-schematic, humanistic and magical way of looking on life and surrounding world.

Add a little bit of madness, and you'll get entire picture of me! :]

I'm a developer, both desktop and mobile, with 15+ years of experience and 50+ small-to-big projects on account. In the very same time I'm a writer with similar experience and a lot of books, articles, blog posts or own blogs ideas on account.


Jul
27
awarded  Constituent
Jul
21
awarded  Notable Question
Jul
20
awarded  Popular Question
Jul
20
awarded  Nice Question
Jul
20
comment Should I implement incorrect password delay in a website or a webservice?
@muru Nope! The very same "elementary OS" system. My question started from this one.
Jul
20
comment Should I implement incorrect password delay in a website or a webservice?
@Jasen That's why I'm totally against account lockout after unsuccessful login attempts and that's why this question was ask (in hope to find something comparable / better than account lockout). I don't speak about security, because I'm newbie here, but from business point of view I can't even imagine horror of one attacker doing brute-force on my system, locking out hundreds of accounts and all those users, that were locked "out of no where" crying on Twitter / Facebook, how wrong my service is.
Jul
20
accepted Should I implement incorrect password delay in a website or a webservice?
Jul
20
comment Should I implement incorrect password delay in a website or a webservice?
Then, again... "If a login attempt doesn't receive a response immediately, the attacker can interpret that as a failed attempt". How do they break passwords from naturally slow servers? Where delayed response does not comes from a security layer, but because server is simply slow / very distant to attacker?
Jul
20
comment Should I implement incorrect password delay in a website or a webservice?
Poor Alice... thank you! :>
Jul
20
comment Should I implement incorrect password delay in a website or a webservice?
Great answer, thank! A side question. Why "she"? You don't like girls and that's why you claim, that most hackers are women or is this some kind of English form, that I don't know (I'm not a native English speaker)? :>
Jul
20
asked Should I implement incorrect password delay in a website or a webservice?
Jul
15
awarded  Caucus
Jul
10
awarded  Nice Answer
Jul
10
revised Can password-protected zip files be broken without brute force?
added 634 characters in body
Jun
9
accepted Are passwords in Mozilla products stored insecurely?
Jun
9
comment Are passwords in Mozilla products stored insecurely?
Well, I must disagree. I have Chrome, Opera, Internet Explorer and Firefox installed on the same machine. I use password managers in all of them and I don't use master password in any of them. However, mentioned tool managed to extract passwords only from Firefox and failed completely on passwords stored in all three other browsers. So, it seems, that this tiny part isn't "true for any password manager there".
Jun
9
asked Are passwords in Mozilla products stored insecurely?
May
4
awarded  Popular Question
Apr
2
comment Password strength in Wordpress Network
@tim. Yes, of course! But, then again... According to an answer given at WD, they're using zxcvbn library by Dropbox. I used it to verify a password, that I'm usually using is considered as strong by Wordpress / Dropbox checker. While it turned out to be so weak, that I wasn't able to continue registration on Samsung. I begin to think, if we're not falling into some kind of paranoia. How can the same password be considered strong by one checker and to weak to continue, by another?
Apr
2
accepted Password strength in Wordpress Network