Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
4
Newest
 Commentator
Impact
0 people reached

  • 0 posts edited
  • 0 helpful flags
  • 154 votes cast
Dec
31
awarded  Commentator
Dec
31
comment Is physical security less important with disks on a server being encrypted?
@CandiedOrange: I was specifically responding to pjc50's comment on "hotplug". If it is about stealing the password, you can also install a webcam filming the keyboard; you don't even need to open the case. Or even easier, you can smash the operator with a $5 wrench.
Dec
31
comment Is physical security less important with disks on a server being encrypted?
@pjc50: I'm aware that it is doable in ideal conditions. However, when I tried to hotplug something on my pc sparks and smoke followed, so I'm not sure how easily this can be done.
Nov
5
comment Has a benefit been demonstrated for credit card machines asking for ZIP code?
@TopinFrassi: if I remember correctly, you pad to the right, not to the left.
Aug
24
comment Firewall on smartphones
@AndréB.: you are discussing firewalls only from the point of view of incoming conections. But there are outgoing connections by rogue applications, too.
Jun
4
comment Is my data safe if, with an encrypted hard disk, I put Windows in “sleep” mode
Also, you wouldn't be able to boot up without the TrueCrypt password.
May
25
comment How to secure MySQL database usernames and passwords within a php file?
True, but the assumption here is to mitigate the risk of the php source being leaked.
May
25
answered How to secure MySQL database usernames and passwords within a php file?
Mar
31
comment Why don't popular web services mask the CVV?
@JamesRyan: you assume that the user has to read it from the card, which is not always the case. Besides, being readable from both the card and the screen makes it easier for the snooper.
Dec
3
comment Why must I have a “strong” password for sites like this?
You seem to imply that Apple's security is good. Please read this: wired.com/2012/08/apple-amazon-mat-honan-hacking/all
Jun
1
comment Is diskcryptor really secure?
The developers have abandoned the project, but that doesn't mean that TC is not secure. The audit has finished it first phase and it shows only minor flaws: istruecryptauditedyet.com
Dec
20
awarded  Supporter
Jan
25
awarded  Autobiographer
Nov
21
awarded  Teacher
Nov
21
comment Why do we ask for a user's existing password when changing their password?
Regarding the last part of the question, my university uses a web application for the profs to assign the grades, and when you want to enter or submit grades, your password is requested. So yes, it does happen that the password is requested for other sensitve tasks.