3,915 reputation
1925
bio website
location Boston, MA
age
visits member for 4 years, 1 month
seen 2 days ago

Nov
18
awarded  Yearling
Dec
31
awarded  Famous Question
Nov
18
awarded  Yearling
Oct
22
awarded  Nice Answer
Jun
6
comment Why is 8ms a goal for hashing?
And with things like AWS, the money required for 200x computing resources * 1 month is a more useful calculation. Because if it is "embarrassing parallel" and you can use utility computing, it all comes down to how much money you want to spend on cracking it.
Apr
27
awarded  Nice Answer
Apr
24
answered Is it possible to configure any of wifi protocols so that the network is undetectable?
Feb
12
answered How to detect KeyLogger on Mac OS X ?
Feb
12
comment Is there a difference between GET and POST for web application security?
What are PUT and DELETE for?
Feb
12
answered Can I scan with nmap from cloud services?
Feb
12
answered Make the public key unrecoverable given the private key
Jan
25
comment Would publishing a network diagram make the network less secure?
I agree with your conclusion that review is normally much more valuable than obscurity. I'm just saying using obscurity as a layer can definitely increase security. Obscurity doesn't provide any hard security guarantees, but it can provide real world benefits.
Jan
25
comment Would publishing a network diagram make the network less secure?
I have to disagree with your original premise. Some amount of security is provided by obscurity, but the sentiment is that you shouldn't rely on obscurity alone for security. If you are provably secure, obscurity doesn't matter, but there are always weakness somewhere.
Jan
18
answered How can I extract the MD5 hash of a password protected MS Office Word 2000 document?
Jan
17
awarded  Nice Answer
Nov
30
comment Dangers of opening up a wide range of ports? (mosh)
I'm not sure you want your EMR server accessible from the internet anyway. Even if you do, I think you could reduce the ports down to a manageable range and then ensure nothing else is using those ports (including a UDP port scan). I would imagine that your EMR application probably uses TCP though.
Nov
20
awarded  Popular Question
Nov
19
revised My credit union is reducing its maximum password length to 10 characters
added 131 characters in body
Nov
18
awarded  Yearling
Oct
20
comment My company policy states I must put all passwords in a password safe shared with management. Is this secure?
I guess you have plausible deniability about everything that happens with your accounts now.