331 reputation
15
bio website sarnold.org
location Lake Oswego, OR
age 36
visits member for 4 years, 1 month
seen 21 hours ago

Paranoid pragmatic security type; I helped develop the AppArmor mandatory access control system. If AppArmor isn't a good fit for your security requirements, please consider running TOMOYO, SMACK, or SELinux.

For more information about me, including an abridged book list, see my careers2.0 profile. Or if you're old-school and want to see all my LaTeX skills on display, my old-fashioned resume is also available.


Aug
1
revised XKCD #936: Short complex password, or long dictionary passphrase?
the wordlist is much smaller than I expected
Aug
1
comment XKCD #936: Short complex password, or long dictionary passphrase?
@AdamKatz, yikes. I've always assumed it used /usr/share/dict/words on my system, which is ~100k words, which would have lead to ~60 bits of entropy for this format. I'll amend my answer. Thanks.
Dec
19
awarded  Nice Answer
Jul
4
awarded  Yearling
May
17
comment I found that the company I work for is putting a backdoor into mobile phones
Do you mean Carrier IQ? Or is this something newer and perhaps not yet widely known?
Dec
13
comment Is it safe to transfer Facebook access token via TCP?
@Rufinus: that doesn't really have much bearing here...
Aug
12
awarded  Editor
Aug
12
answered XKCD #936: Short complex password, or long dictionary passphrase?
Aug
12
comment XKCD #936: Short complex password, or long dictionary passphrase?
So we're agreed: Germans need two words, the rest of us need four words? :)
Jun
13
awarded  Supporter
Jun
13
answered Is using a public-key for logging in to SSH any better than saving a password?
Jun
13
awarded  Autobiographer
Jun
13
awarded  Teacher
Apr
29
answered how long does it take to actually generate rainbow tables?