David Wachtfogel

2,931 reputation

119

bio	website	goodenoughsecurity.blogspot.c…
	location	Jerusalem, Israel
	age	39
visits	member for	10 months
	seen	Mar 13 at 7:51
stats	profile views	48

Digital security professional and manager. Work on chip hardware security (smart cards, USB tokens, consumer electronics), DRM, proprietary cryptography and protocols, embedded software security, end-to-end system security and security policy.

IT security (especially password security) is a hobby.

	2,931 reputation	bio	website	goodenoughsecurity.blogspot.c…	visits	member for	10 months
119 badges		location	Jerusalem, Israel		seen	Mar 13 at 7:51

summary answers questions tags badges favorites bounties reputation activity

59 Answers

newest activity votes

Are there really functioning quantum computers?

oct 24 at 14:20

How can you judge the physical security of a padlock?

oct 11 at 20:18

Why do some sites prevent users from reusing their old passwords?

sep 24 at 6:21

Is it safe to use a weak password as long as I have two-factor authentication?

nov 14 at 22:01

Client side password hashing

oct 23 at 4:54

Should I be concerned when a “Forgot Password?” tool sends my password in plaintext?

oct 30 at 7:44

Can someone detect the URL an android app uses?

oct 18 at 14:02

What is the key when facial recognition is used as a password?

oct 3 at 9:22

Bypassing the BIOS password

sep 3 at 7:59

Confused about (password) entropy

oct 5 at 6:23

What is the potential impact of these SSL certificate validation vulnerabilities?

oct 22 at 22:09

Encryption in an embeddded system

nov 7 at 7:53

When using symmetric key encryption, do we need to sign?

nov 4 at 7:57

How can I encrypt a file with .NET and have the same file size of the original file?

oct 30 at 18:46

Does anyone use XML Encryption?

oct 15 at 8:29

How do I construct a rainbow table to crack a 6 character password?

oct 25 at 13:10

Do Client Nonces enhance the security of HTTP Digest Auth?

oct 16 at 11:10

What is SHA-3 and why did we change it?

oct 5 at 5:22

Firefox lists '(unknown)' as the owner of google.com. Is my connection insecure?

oct 4 at 20:36

Microsoft password strength checker

nov 21 at 20:20

Is there a table that compares hashing algorithms by speed, relatively (machine independent)

nov 21 at 7:56

Reset password - should I prevent abusing it?

nov 21 at 7:42

Privacy implications of IDFA/IDFV? (iPhone/iOS)

oct 17 at 8:03

Is there any processor that could decrypt encrypted data and machine instructions?

oct 13 at 20:12

Distributed XAdES-X and XAdES-A signatures over multiple documents

oct 8 at 19:15

Does a working JTAG diagnostics port on Android phone add unnecessary risk?

oct 6 at 17:26

Using Elliptic Curve Cryptography

oct 4 at 7:13

MDK3 warns about WPA2 downgrade - how do I find the key in Wireshark?

sep 21 at 8:08

Without SSL, what vantage point does one need to MITM non-SSL'd HTTP?

sep 14 at 8:24

User authentication + database encryption with same password

nov 8 at 20:45