716 reputation
1912
bio website thecomsci.wordpress.com
location Sweden
age 46
visits member for 3 years, 5 months
seen Feb 20 at 13:11

Experienced software developer.


Dec
17
comment Why should I run OWASP Broken Web Applications Project as host only or NAT?
So it is for protecting the Virtual Machine from other computers, rather than the other way around?
Sep
28
comment How secure are my passwords in the hands of Firefox using a Master Password?
I finally found the time to test this and it seems activating sync requires my master password, if I have one set. This should make your point a non-issue.
Mar
21
comment How long should the password be?
Granted. I was going for a short, usefull answer. 16 random characters, upper and lower case, and numbers and special characters is a good minimum. Five diceware words is superior to this.
Jun
28
comment How secure are my passwords in the hands of Firefox using a Master Password?
Hmm. Define "this crap" please. :-) Also, I believe the password file on Firefox is encrypted
Jun
28
comment How secure are my passwords in the hands of Firefox using a Master Password?
Sounds correct, but irrelevant. This is true even if I don't let Firefox save my passwords. The root-kit problem is true for all applications on the infected computer, not specific to Firefox.
Nov
24
comment What is your way to create good passwords that can actually be remembered?
Basically, you six letter All ASCII Printable Characters password has around 36 bits of entropy. Your 22 characters Case Insensitive Latin Alphabet password has more than 96 bits of entropy. See Wikipedia for details (secure.wikimedia.org/wikipedia/en/wiki/Password_strength)
Nov
24
comment Is it ever appropriate to fight back?
I think entrapment would require you to invite people to hack your site. The difference of a Police Officer offering to buy drugs and a Police Officer being offered to buy drugs; active or passive.
Nov
24
comment What is your way to create good passwords that can actually be remembered?
I disagree. If I wrote a program to find the password using brute force, I would check the shorter password much sooner than the longer password. I might be able to crack a six letter password within a day. The 22-letter a-password would take years, if not decades, using brute force. Also, I did say the MOST important, not the only attribute. Do you discourage using Diceware?
Nov
22
comment How secure are my passwords in the hands of Firefox using a Master Password?
I though such tools used a brute-force approach, if protected by a Master Password.
Nov
18
comment How secure are my passwords in the hands of Firefox using a Master Password?
One article says to enable FIPS for improved protection. Why isn't FIPS enable by default then?