408 reputation
212
bio website
location Alphen aan Den Rijn, The Netherlands
age 53
visits member for 2 years, 1 month
seen yesterday

Software developer at TimeTell BV, The Netherlands


1d
comment Using unique email address for online signups?
A technique that people sometimes use in order to have not too many (to remember/store) email addresses: use separate addresses for important logins, use one for the many other less important sites (forums, blogs...)
Nov
25
comment IIS server get flood
They should give you the data they say is coming from your app. Without that you now nothing, as do we.
Nov
15
comment Is SHA1 weak for SSL?
Extended discussion about the Google move in Security Now ep. 473 grc.com/securitynow.htm
Oct
29
comment Client Hello message suggests cipher suite which is not in the list specified by setEnabledCipherSuites() method
You can make that an answer (answer your own question) - then it is more obvious to others that there is an answer. You can even mark it as the correct answer after 48 hours.
Oct
3
awarded  Yearling
Sep
30
awarded  Explainer
Sep
17
comment Security of a Random Password
@Curious I get the impression that you have asked this answer only to get confirmation for your assumption (that a 15-char random PW is good enough) instead of really understanding the comments and answers. NO, there are circumstances where it's not good enough. 'In case of database breach' depends very much on how well that DB stored the PWs. Actually, there are so many different scenarios that your question could be seen as 'too broad'.
Sep
17
revised Security of a Random Password
threads -> threats
Sep
17
suggested suggested edit on Security of a Random Password
Sep
14
comment Tiny USB sticks
Why not fill an ordinary USB stick with plain text files that cannot be infected, leaving only a kilobyte? It's highly unlikely that a virus will make room for itself by deleting files. Maybe that leaves the possibility of a boot sector infection, I dunno (does a USB stick have one?)
Sep
5
answered How to decide whether to password protect key files in addition to full disk encryption
Aug
25
comment Brute force alphanumeric password using JohnTheRipper
I remember doing this yeeeeeaaaars ago with a very simple Turbo Pascal program I wrote that called unzip with each possible password. Maybe that's an option, just add some logging and the next morning you have your hit.
Aug
17
comment Why do we use such a redundant language (English) for network communication?
This question comes from an incorrect viewpoint. You are talking as if the encryption algoritm has a preference for English (or any natural language for that matter). It does not, we do. So we compress English. To put it another way: your question text "we use English for network communications" is incorrect.
Aug
11
comment Sophos virus protection continuously blocking codegv.ru
It is indeed a suspect site. According to ScanUrl.net the site codegv.ru has a negative reputation at Web of Trust(WOT). And McAfee SiteAdvisor reports it as a spam URL. And there are reports about hacked Ukrainian sites having scripts linking to codegv.ru
Aug
11
comment Why must every OTP be unique
'Per user' I assume? Your post does not say so explicitly.
Aug
7
answered Why after a website password reset am I asked to login again?
Aug
6
revised Appropriate response to 2014 Russian Security Breach (CyberVor)
Inserted link
Aug
6
comment Appropriate response to 2014 Russian Security Breach (CyberVor)
Not much hard data in there, just generic statements. Looks like they assembled a database.
Aug
6
suggested suggested edit on Appropriate response to 2014 Russian Security Breach (CyberVor)
Aug
4
revised Securing fingerprint templates stored on web authentication server
flow -> flaw ;-) and general cleanup