1,930 reputation
518
bio website budo.markcwallace.net
location United States
age 51
visits member for 1 year, 10 months
seen Aug 15 at 11:53

I'm currently studying Tomiki Aikido under Dr. Yoji Kondo, although I started in Yoshinkan aikido under Helton-Sensei. I'm also studying Taiji under D. Gilmer at StillwaterTaichi I'm informally studying jo and bokken.

When I'm not on the mat, I provide project management support to the the Identity, Credential, and Access Management program at a US Federal Cabinet agency, but I want to get back into risk management and computer security/information assurance.


Aug
14
comment How secure is KolibriOS?
How pretty is Gillian Anderson? Unless you provide a context/threat model/metric for security, all answers are merely opinion.
Aug
14
comment Implementing simple authencation based on random number generated
Do you want to do simple random number authentication, or do you want to involve administrators in security critical operations. (and you're actually not doing authentication, you're doing authorization). I think this is an XY Problem
Aug
14
comment Firefox vs. Chrome extensions: Which are---ceteris paribus---more secure?
How do you define "secure"? "which is more secure?" is like asking "which girl is more beautiful?", unless you define the criteria you use to determine "secure".
Aug
13
awarded  Nice Answer
Aug
13
comment CSP Reports: Ignoring Client Malware
@jackson - that helps - but it would help more if you put those facts in the question, rather than in the comments.
Aug
13
comment CSP Reports: Ignoring Client Malware
@jackson, thank you for answering begueradj's question about why you want this; could you add that information to the question? It really helps me to understand what you're asking and why.
Aug
11
reviewed No Action Needed What is Reflected XSS?
Aug
11
reviewed No Action Needed Can i know how chosen ciphertext attack work on textbook RSA
Aug
11
comment What does one call the strategy of using “pre-password transforms” as passwords?
I've never heard the term "witty password" - do you have a reference to the term?
Aug
11
reviewed No Action Needed Sophos virus protection continuously blocking codegv.ru
Aug
10
comment Resetting passwords howto
@kiBytes, those are interesting, but not compelling points. In general the security of an identity provider is going to be superior to the security provided by "ihavecancer" or some other organization for which identity is a sideline. (See Cyvor for evidence). Federation is included in the security architecture at every level of security, including the most secure.
Aug
10
comment Resetting passwords howto
Thank you @kasperd; I've updated the answer based on your input. Very good point.
Aug
10
revised Resetting passwords howto
added 357 characters in body
Aug
7
revised Testing Malware in one Virtual Machine which is running side by side along with other Virtual Machines
Spellcheck is your friend
Aug
7
suggested suggested edit on Testing Malware in one Virtual Machine which is running side by side along with other Virtual Machines
Aug
6
comment How i can stop already sent email?
Not sure this is a security question.
Aug
5
comment How does an insecure RNG affect cryptography, and how do I measure the corresponding loss of security?
+1 for attempting to quantify a failure in security.
Aug
5
answered Basis Authentication Protocol: a concrete attack
Jul
31
answered User Account Guessing
Jul
28
comment LastPass Grid Authentication vs Google Authenticator which one is more secure?
Don't ask "which is more secure" unless you provide a mechanism to define "more secure". Which girl is more pretty? which cake is more tasty? which book is more interesting? which football team is more skillful?