3,216 reputation
423
bio website goodenoughsecurity.blogspot.c…
location Jerusalem, Israel
age 41
visits member for 2 years
seen Mar 6 at 7:06

Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.

IT security (especially password security) is a hobby.


Aug
14
awarded  Yearling
Aug
9
awarded  Enlightened
Aug
9
awarded  Nice Answer
Jul
19
awarded  Nice Answer
Oct
14
awarded  Nice Answer
Oct
1
awarded  Popular Question
Aug
14
awarded  Yearling
Nov
23
comment anomaly detection: feature calculation problem
@makerofthings7 In this case Google - but it's generally a good site for finding papers
Nov
21
reviewed Reviewed Network anomaly detection or anomaly-based intrusion detection?
Nov
21
answered Microsoft password strength checker
Nov
21
reviewed Reviewed Why block outgoing network traffic with a firewall?
Nov
21
reviewed Reviewed Does it matter which Certificate Authority I source my SSL Certificate from?
Nov
21
comment anomaly detection: feature calculation problem
Try here: hal.archives-ouvertes.fr/docs/00/73/62/78/PDF/…
Nov
21
comment Reset password - should I prevent abusing it?
Security questions are a very weak form of user identification and shouldn't be used in lieu of a password - i.e. you should never grant access to a resource based only on a security question. But security questions are probably good enough to prevent false password resetting (which isn't much of a hack - it's just a nuisance) and you can't do much better than them for this purpose. CAPTCHAs aren't very good for this purpose since the attack can be done manually (you only need to do it once an hour to be very annoying).
Nov
21
answered Is there a table that compares hashing algorithms by speed, relatively (machine independent)
Nov
21
answered Reset password - should I prevent abusing it?
Nov
19
awarded  Nice Answer
Nov
16
answered applications of linear algebra to “security”?
Nov
14
answered Is it safe to use a weak password as long as I have two-factor authentication?
Nov
8
answered User authentication + database encryption with same password