1,802 reputation
827
bio website http://-
location Zagreb, Croatia
age 25
visits member for 3 years, 2 months
seen 20 hours ago

Very courius guy!


Nov
18
comment Why do we even use passwords / passphrases next to biometrics?
You can't reproduce fingerprint. You can't even use stolen credentials to gain access (in the same fashion you would with passwords) link
Nov
17
comment Would this idea for a password be secure?
"...if an attacker knows one password they can likely figure out the others." How? How can attacker even know you used some kind of algorithm to forge a password?
Nov
16
comment Why do we even use passwords / passphrases next to biometrics?
Because, there isn't a single (or very few) piece(s) of information about thumbprint stored in DB (or where ever you store data). Forging thumbprint is not really an option (unlike password). Think of it as black and white picture (with none or next to none grey-scale colors) - where was the blue color in the original image? Was there any? Yet, we can assume, each this b&w picture stored in DB is unique.
Aug
6
comment Does adding a non-entropic part to a password makes it less secure?
How is suffix added - by user or by application?
Aug
6
comment Is initializing variable to NULL or 0 or -1 a bad practice from security standpoint?
@ThomasPornin - It seems my Q wasn't clear enough. The answer which I'm looking for is actually your second paragraph.
Jan
16
comment Methods for remembering passwords around the web
This + option number 1 = win
Dec
21
comment If someone asks to borrow your phone to make a call, what could they do?
@DanNeely - because providing the very same answer as already posted shouldn't be encouraged. While Mike's answer is not likely to happen and it's more of a joke, it's still has a point.
Dec
21
comment Designing in zero day attack mitigations
EMET link is broken. Could you, please, if possible, fix it?
Aug
16
comment How to mimic an emotion?
@MikeSamuel From FAQ - "IT Security - Stack Exchange is for Information Security professionals to discuss protecting assets from threats and vulnerabilities. Topics include, but are not limited to:(...) social engineering, including phising(...)" If you feel this question is off, you can flag it or open discussion on meta.security.stackexchange.com. In short, microexpressions helps me to exploit human part of IT system (humanware). If I asked how can I better mimic expression X to get secretary plug in my USB, would then question be on topic?
Aug
16
comment How to mimic an emotion?
@MikeSamuel Please take a look at this question to get grasp what SE really is. Also, SE: The art of human hacking is great starting point and it gives link between microexpressions and IT security.
Aug
16
comment How to mimic an emotion?
@MikeSamuel - You didn't hear about Kevin Mitnick, Christopher Hadnagy, Paul Wilson, David Bannon, Farnk Abagnale, etc.? This is as much basic common knowledge as protecting infrastructure from malware.
Aug
15
comment Risks of Mullions in High Security Areas
Can you give better description of locks?
Aug
13
comment Ideas to build security awareness
Check this question, you might find it useful.
Aug
13
comment How can we get into the user's mindset?
I would just add, at the end of the each question ask - Why?
Apr
17
comment Getting rid of a large quantity of paper
@rox0r I'm sorry for late replay, but after few weeks of searching I couldn't find any link describing decomposing paper in warer. I did it about 15 years ago as school project, so only thing I can do is to edit my answer to describe how to decompose few sheets of paper. However, for larger scale, I'm in dark, unfortunately.
Jan
8
comment Business systems development (.NET, Java) vs IT Security Field, salary/future perspective
What's the point of never ending education and working for the rest of your life if one doesn't "pick what he likes more"?
Dec
1
comment Why do we even use passwords / passphrases next to biometrics?
Well, I could counter your statement (retina and medical conditions) with - passwords and Alzheimer. IMHO, the vast majority of people could use biometrics without any problem at all.
Oct
5
comment Is it still unsafe to email credit card number nowadays?
Send CCN by e-mail and CCV by SMS or vice versa? Well, if encryption is no-go.
Sep
20
comment Which forensic techniques should I use to identify intrusion or monitoring of my computer or cellphone
If we tell you, we'll have to kill you!
Sep
8
comment Literature about IT security from a hardware standpoint
Did you read it? I got that impression by looking at table of context. I'm definitely going to buy it (40$ for over 1000 pages book), just not sure is this what I'm looking for.