163 reputation
9
bio website devresults.com
location Washington, DC
age 44
visits member for 1 year, 5 months
seen Feb 28 '13 at 14:30

Herb is the owner and lead software architect for Caudill Web, a small web development shop in Washington DC with a focus on international development and humanitarian aid programs. Caudill Web's flagship product is DevResults, a data management and mapping web app for development projects.


Jul
12
awarded  Popular Question
Nov
20
awarded  Benefactor
Nov
20
awarded  Scholar
Nov
20
accepted Is it safe to use a weak password as long as I have two-factor authentication?
Nov
15
comment Is it safe to use a weak password as long as I have two-factor authentication?
This is interesting - I've bookmarked the Wired article to read - but is an answer to a different question. I wasn't really asking whether 2FA is invulnerable, but whether I can relax a bit about the crackability of my password if I'm using 2FA.
Nov
15
awarded  Nice Question
Nov
15
awarded  Supporter
Nov
14
awarded  Promoter
Nov
11
comment Is it safe to use a weak password as long as I have two-factor authentication?
And, more specifically, is it even possible for such a trojan to install and successfully access that information on a non-jailbroken iPhone?
Nov
11
comment Is it safe to use a weak password as long as I have two-factor authentication?
@CodesInChaos - So just to make sure I understand the scenario: Without physical possession of my phone, Chuck puts a trojan on my phone that reports both my Google password and the verification messages I get back from Google. Chuck then immediately uses both of those to gain access to my account. Do I have that right? I would have thought that the 6-digit code Google issues is only valid for the IP address and/or physical device I'm trying to log in from.
Nov
11
revised Is it safe to use a weak password as long as I have two-factor authentication?
Added superscript
Nov
11
comment Is it safe to use a weak password as long as I have two-factor authentication?
@CodesInChaos - Can you explain your point about using the same device? Seems to me that someone would still have to (a) know my password and (b) be in possession of my device in order to gain access.
Nov
11
awarded  Editor
Nov
11
revised Is it safe to use a weak password as long as I have two-factor authentication?
added clarification in response to comments
Nov
11
awarded  Autobiographer
Nov
11
awarded  Student
Nov
9
asked Is it safe to use a weak password as long as I have two-factor authentication?