462 reputation
13
bio website ericfleischman.com
location
age
visits member for 1 year, 11 months
seen Feb 23 '13 at 23:25

Sep
24
awarded  Yearling
Oct
25
comment Password Security: Encrypting salt
It's not misinformed, it is theoretical though (as are all of them). I could imagine building systems that achieve this goal though I am aware of few systems that have ever engineered with this assumption in mind.
Oct
24
answered Password Security: Encrypting salt
Oct
18
comment My bank makes me enter my password using the mouse. What's up with that?
You answered your own question. :) They think it defeats a class of bad guys that use keyloggers.
Sep
26
comment Can a Bitlocker To Go user pin be brute forced?
Ah, I'm sorry, I thought we were talking about the password. I misread.
Sep
26
comment Can a Bitlocker To Go user pin be brute forced?
...and if I'm not mistaken, some implementations can brick the device after N attempts.
Sep
24
comment Three-Factor Authentication for Windows
Nor am I...but can't please all the people all the time. :) If you set this up I'm curious how well it works. I thought a bit more about it and I think it will...
Sep
24
awarded  Mortarboard
Sep
24
answered Three-Factor Authentication for Windows
Sep
24
awarded  Editor
Sep
24
comment Why does Microsoft limit password length?
@lszi: paste complete
Sep
24
revised Why does Microsoft limit password length?
added 478 characters in body
Sep
24
comment Windows Vista user logon integrity
I'd actually love to know what your real goal is. Anyway, even if you clear the logs, this shouldn't be confused with removing all traces of the user from the machine. It turns out that users leave other tidbits behind...cached credentials, a profile, etc. So clearing logs, while it removes some of the history, doesn't remove all traces of the user having ever been there. If that's your goal, the logs are the easy part. Many other things can still lurk long after the logs are gone.
Sep
24
comment Why does Microsoft limit password length?
I agree, disagree with moderators...not a duplicate to me.
Sep
24
answered Why does Microsoft limit password length?
Sep
24
awarded  Teacher
Sep
19
answered HTTPS vs. HTTP - Is there a security reason for HTTPS for a site that only does Facebook login?