1,932 reputation
518
bio website budo.markcwallace.net
location United States
age 51
visits member for 1 year, 11 months
seen 22 mins ago

I'm currently studying Tomiki Aikido under Dr. Yoji Kondo, although I started in Yoshinkan aikido under Helton-Sensei. I'm also studying Taiji under D. Gilmer at StillwaterTaichi I'm informally studying jo and bokken.

When I'm not on the mat, I provide project management support to the the Identity, Credential, and Access Management program at a US Federal Cabinet agency, but I want to get back into risk management and computer security/information assurance.


5h
revised How do hackers deploy keyloggers?
The title was substantially and semantically different from the question. I believe I've now aligned them. (How to **USE** a keylogger is different from where and how it is installed)
6h
suggested suggested edit on How do hackers deploy keyloggers?
2d
comment Security of a Random Password
NIST provides both the answers and the methodology to understand the problem and reach your own answers. On the other hand, if you're up against an opponent with rainbow tables, the brute force work is already done.
Sep
16
comment Simple Ciphers to Create Secure Passwords
I think you're falling into the XY trap. What is the problem you need to solve?
Sep
16
reviewed Reviewed Simple Ciphers to Create Secure Passwords
Sep
16
comment Simple Ciphers to Create Secure Passwords
Can one? probably - most passwords also require complexity, and it is unlikely that a shift cipher will generate the resulting complexity. Most users are also going to find that the resulting cipher is too complex. Also most simple ciphers (that can be done unaided by a human) are NOT resilient against cryptanalysis. Ultimately the question rests on how you measure security and what your threat profile looks like.
Sep
16
comment Privacy concerns while traveling with HDDs
IANAL, but it seems rather imprudent to ask random strangers on the internet to assist you in violating the law.
Sep
15
revised Drawbacks of OpenVAS
Provided link for those of us who don't have the whole internet memorized.
Sep
15
comment Drawbacks of OpenVAS
Extraordinarily broad question. Moreover the answer will be obsolete the moment the first of the software products upgrades.
Sep
15
suggested suggested edit on Drawbacks of OpenVAS
Sep
11
comment What forms of two-factor authentication are used by the Healthcare industry?
That is a very broad question - I would imagine that across the entire world, the healthcare industry uses nearly all forms of two factor authentication.
Sep
10
comment What kind of factor is a physical signature?
Depends on how you analyze it. If you do graphology, it could be a biometric factor (inherence). Otherwise it is a policy control, and doesn't fit the multi-factor paradigm.
Sep
4
comment Is information security based entirely on mathematics
False assumption; Information security is far more than encryption. Just as a trivial example, information security includes availability, and encryption doesn't help availability. Even the best encryption in the universe is worthless if the key for the encryption is leaked, and no amount of math will affect whether someone with the key leaks the key.
Aug
29
comment Why should I sign data that's already encrypted?
The clarification to Andrey's answer is valuable in interpreting your question; you might want to move it here.
Aug
28
comment Additional security benefits from Multi-Factor Authentication?
I wish people would answer your question rather than attacking the assumptions. Your question explicitly states that the single factor authentication is both strong enough and error resistant enough to fulfill your authentication needs. Adding a second factor does not change that. I can imagine cases where a second factor might support subsequent authorization or policy enforcement, but that is outside the scope of your questino.
Aug
27
comment Example of application that doesn't require “strong authentication”
egress filtering? NIST 800-53 AC-19? Actually I'm pretty sure you'll find what you're looking for if you look at advertising networks - they need to 'authenticate' users at the weakest possible scheme.
Aug
27
comment Example of application that doesn't require “strong authentication”
This is actually an argument for attribute based access control - the relying party asks for and receives a weak attribute proof.
Aug
21
comment Printer SSL certificates
Do you care if I print to your printer? Do you care if I use your printer as an attack vector to your network?
Aug
21
reviewed No Action Needed Are there any hardware HSMs that can host/run custom applications using the HSM processor(s) within the hardened security boundary?
Aug
21
comment How secure are sentence passwords?
There are ample methodologies to calculate the entropy of any authentication scheme; this question would be stronger if it demonstrated preliminary research.