4,398 reputation
11126
bio website
location Boston, MA
age
visits member for 4 years, 8 months
seen Jul 21 at 20:19

Jul
15
comment Is it helpful to have a captcha on a login screen?
@codesinChaos If they have many zombies it's not a trivial DoS attack anymore. I think one goal is raising the bar high enough so there is enough noise where an IDS can alert a human.
Jul
15
awarded  Good Answer
Jul
14
awarded  Nice Answer
Jul
14
comment Is it helpful to have a captcha on a login screen?
That's mostly correct. The distributed attack across multiple logins will not get hit by it unless they fail N times for each login. If you are worried that a given account can get cracked in under N tries, you need to lower N.
Jul
14
answered Standard (or solution) for securing files in a point-to-point integration
Jul
14
answered Is it helpful to have a captcha on a login screen?
Jul
10
awarded  Notable Question
Nov
18
awarded  Yearling
Dec
31
awarded  Famous Question
Nov
18
awarded  Yearling
Oct
22
awarded  Nice Answer
Jun
6
comment Why is 8ms a goal for hashing?
And with things like AWS, the money required for 200x computing resources * 1 month is a more useful calculation. Because if it is "embarrassing parallel" and you can use utility computing, it all comes down to how much money you want to spend on cracking it.
Apr
27
awarded  Nice Answer
Apr
24
answered Is it possible to configure any of wifi protocols so that the network is undetectable?
Feb
12
answered How do I detect malware on Mac OS X?
Feb
12
comment Is there a difference between GET and POST for web application security?
What are PUT and DELETE for?
Feb
12
answered Can I scan with nmap from cloud services?
Feb
12
answered Make the public key unrecoverable given the private key
Jan
25
comment Would publishing a network diagram make the network less secure?
I agree with your conclusion that review is normally much more valuable than obscurity. I'm just saying using obscurity as a layer can definitely increase security. Obscurity doesn't provide any hard security guarantees, but it can provide real world benefits.
Jan
25
comment Would publishing a network diagram make the network less secure?
I have to disagree with your original premise. Some amount of security is provided by obscurity, but the sentiment is that you shouldn't rely on obscurity alone for security. If you are provably secure, obscurity doesn't matter, but there are always weakness somewhere.