meta user
network profile
| bio | website | goodenoughsecurity.blogspot.c… |
|---|---|---|
| location | Jerusalem, Israel | |
| age | 39 | |
| visits | member for | 9 months |
| seen | Mar 13 at 7:51 | |
| stats | profile views | 47 |
Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.
IT security (especially password security) is a hobby.
|
Nov 23 |
comment |
anomaly detection: feature calculation problem @makerofthings7 In this case Google - but it's generally a good site for finding papers |
|
Nov 21 |
reviewed | Reviewed Network anomaly detection or anomaly-based intrusion detection? |
|
Nov 21 |
answered | Microsoft password strength checker |
|
Nov 21 |
reviewed | Reviewed Why block outgoing network traffic with a firewall? |
|
Nov 21 |
reviewed | Reviewed Does it matter which Certificate Authority I source my SSL Certificate from? |
|
Nov 21 |
comment |
anomaly detection: feature calculation problem Try here: hal.archives-ouvertes.fr/docs/00/73/62/78/PDF/… |
|
Nov 21 |
comment |
Reset password - should I prevent abusing it? Security questions are a very weak form of user identification and shouldn't be used in lieu of a password - i.e. you should never grant access to a resource based only on a security question. But security questions are probably good enough to prevent false password resetting (which isn't much of a hack - it's just a nuisance) and you can't do much better than them for this purpose. CAPTCHAs aren't very good for this purpose since the attack can be done manually (you only need to do it once an hour to be very annoying). |
|
Nov 21 |
answered | Is there a table that compares hashing algorithms by speed, relatively (machine independent) |
|
Nov 21 |
answered | Reset password - should I prevent abusing it? |
|
Nov 19 |
awarded | Nice Answer |
|
Nov 16 |
answered | applications of linear algebra to “security”? |
|
Nov 14 |
answered | Is it safe to use a weak password as long as I have two-factor authentication? |
|
Nov 8 |
answered | User authentication + database encryption with same password |
|
Nov 7 |
reviewed | Reviewed Passwords In Securing Network Devices |
|
Nov 7 |
revised |
Encryption in an embeddded system Added solution for if you assume the firmware is not modifiable |
|
Nov 7 |
comment |
Encryption in an embeddded system If you assume that the attacker cannot modify the firmware then all you need to do is sign the file using RSA with PKCS#1 padding (which is good enough for your needs). sourceforge.net/projects/tplockbox has Delphi code for this; OpenSSL has C code. Since the information in the file (prices) is not secret there's no reason to encrypt the file. |
|
Nov 7 |
revised |
Encryption in an embeddded system Typo and wording |
|
Nov 7 |
answered | Encryption in an embeddded system |
|
Nov 5 |
reviewed | Reviewed How do you log in from an unsecured computer? |
|
Nov 5 |
reviewed | Reviewed Attacks surrounding /etc/hosts/ |
