3,311 reputation
524
bio website goodenoughsecurity.blogspot.c…
location Jerusalem, Israel
age 41
visits member for 2 years, 4 months
seen Mar 6 at 7:06

Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.

IT security (especially password security) is a hobby.


Nov
7
revised Encryption in an embeddded system
Added solution for if you assume the firmware is not modifiable
Nov
7
revised Encryption in an embeddded system
Typo and wording
Nov
1
revised Practices for storing username/password in Web applications
typo fix
Oct
31
revised How can I encrypt a file with .NET and have the same file size of the original file?
Added explanation as to the background of the solution
Oct
30
revised Should I be concerned when a “Forgot Password?” tool sends my password in plaintext?
added 14 characters in body
Oct
28
revised Storing OAuth and other authentication tokens
Minor wording change
Oct
23
revised Client side password hashing
Added clarification in last sentence
Oct
22
revised Can someone detect the URL an android app uses?
Adding explanation that rooting helps if the certificate is hardcoded.
Oct
19
revised What is a DoS Attack and how does it differ from a DDoS attack?
added 2 characters in body
Oct
19
revised What is a DoS Attack and how does it differ from a DDoS attack?
added TL;DR
Oct
18
revised Can someone detect the URL an android app uses?
deleted 9 characters in body
Oct
17
revised Privacy implications of IDFA/IDFV? (iPhone/iOS)
added 23 characters in body
Oct
17
revised Privacy implications of IDFA/IDFV? (iPhone/iOS)
typo fix
Oct
16
revised Do Client Nonces enhance the security of HTTP Digest Auth?
added 111 characters in body
Oct
12
revised Known password length, brute force character in place?
added 1 characters in body
Oct
12
revised Known password length, brute force character in place?
added 76 characters in body
Oct
10
revised Decryption on AES when the same key and IV are used
Corrected based on comments
Oct
7
revised Shared hosting mail server, Thunderbird and encryption
Minor corrections
Oct
4
revised Firefox lists '(unknown)' as the owner of google.com. Is my connection insecure?
Added ref to longer explanation on EV certificates
Oct
4
revised Using Elliptic Curve Cryptography
Adding details as to why an OTP may be better than other sym algos.