2,911 reputation
119
bio website goodenoughsecurity.blogspot.c…
location Jerusalem, Israel
age 39
visits member for 9 months
seen Mar 13 at 7:51
stats profile views 47

Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.

IT security (especially password security) is a hobby.


Nov
5
awarded  Custodian
Nov
5
reviewed Reviewed How do you log in from an unsecured computer?
Nov
5
reviewed Reviewed Which ports are potential security risks for nmap?
Nov
5
comment Potential consequences of using “Everyone” to manage permissions?
This does not provide an answer to the question. To critique or request clarification from an author, leave a comment below their post - you can always comment on your own posts, and once you have sufficient reputation you will be able to comment on any post.
Nov
4
comment Should Stack Exchange be more obscure in its systems' structure?
As @RoryMcCune wrote in his response to security.stackexchange.com/questions/2430/…, obscurity shouldn't be relied on for security but there are situations where obscurity is good as an extra layer on an otherwise properly secured system. Obscurity isn't bad in itself - it's bad only if it is used to hide the fact that the system is otherwise not secure.
Nov
4
comment What is SHA-3 and why did we change it?
@PaĆ­loEbermann Sure.
Nov
4
answered When using symmetric key encryption, do we need to sign?
Nov
4
answered Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?
Nov
3
awarded  Nice Answer
Nov
1
revised Practices for storing username/password in Web applications
typo fix
Nov
1
reviewed Reviewed Different Security Issues Depending on OS?
Nov
1
answered Practices for storing username/password in Web applications
Oct
31
comment How can I encrypt a file with .NET and have the same file size of the original file?
@Thomas - is this clearer now?
Oct
31
revised How can I encrypt a file with .NET and have the same file size of the original file?
Added explanation as to the background of the solution
Oct
31
comment How can I encrypt a file with .NET and have the same file size of the original file?
@Thomas - which is why I wrote the two conditions above. I'll edit the post to clarify this point.
Oct
30
answered How can I encrypt a file with .NET and have the same file size of the original file?
Oct
30
comment How does syskey in Windows increase the security in a domain?
You can +1 the answers :)
Oct
30
comment How does syskey in Windows increase the security in a domain?
As long as syskey is not stored on the Windows machine but in a removable storage device you should be OK. Graham Hill wrote in his response that if you map a USB drive to A:\ syskey will be written to that drive. If so that's probably you're best bet.
Oct
30
revised Should I be concerned when a “Forgot Password?” tool sends my password in plaintext?
added 14 characters in body
Oct
30
answered How does syskey in Windows increase the security in a domain?