962 reputation
817
bio website
location
age
visits member for 3 years, 5 months
seen yesterday

Aug
15
comment Difference between OS X md5 and gnu md5sum
+1. You might mention that this problem bites a lot of people: 1, 2, 3, etc.
Aug
15
asked Why recommend “letters, numbers, and special characters” in a User ID?
Aug
13
comment What are the security reasons for disallowing the plus sign in email addresses?
related: "plus haters"
Jul
5
awarded  Excavator
Jul
5
revised best place to store backup encryption key
clarify exactly who is waiting
Jul
5
suggested suggested edit on best place to store backup encryption key
Jul
4
revised Why do ATMs accept any PIN?
clarify that "verifying your PIN using your ATM card" is a hypothetical scenario used to explain why the actual system is not like that.
Jul
4
suggested suggested edit on Why do ATMs accept any PIN?
Jul
4
awarded  Civic Duty
May
29
awarded  Notable Question
May
5
awarded  Nice Question
Apr
19
revised Is there anything standing in the way of email encryption going mainstream?
fix technical glitch that doesn't affect the main argument.
Apr
19
suggested suggested edit on Is there anything standing in the way of email encryption going mainstream?
Feb
28
awarded  Yearling
Feb
6
comment Sharing passwords through email can be considered insecure?
plaintextoffenders.com/about says "sending the password via email ... is bad." That seems to directly contradict "For most webs and services it is ok to send you a clear password ... to your e-mail." Did you maybe intend to put a "not" somewhere in that sentence?
Feb
6
comment Sharing passwords through email can be considered insecure?
Have you heard of plaintextoffenders.com/about ?
Feb
3
comment Does server RAM count as storage for PCI Compliance?
+1 agree. Maybe it would be better if the credit card data went directly from the customer to a PCI-compliant server directly to the payment processor (as with Stripe, Square, Chargify, etc.), rather than making a detour through some other server.
Jan
24
comment Where is the salt on the OpenSSL AES encryption?
related: "Is there a standard for OpenSSL-interoperable AES encryption?"
Jan
13
comment Increase the security of an already stored password hash
related: Convert old and busted password encryption to something sensible
Nov
23
awarded  Notable Question