3,091 reputation
620
bio website
location Curitiba, Brazil
age 35
visits member for 3 years, 5 months
seen Dec 18 at 13:00

Computer analyst


Oct
22
comment Competitor app blocks our app, need a way to bypass their check
If they go after the app name, don't think that there is any easy method on changing you app name every time to fool their app.
Oct
21
comment What is the difference between “key length” and “bit strength”?
possible duplicate of Is it true that encryption bit "strength", although numerically identical, may actually be different depending on the algorithm?
Sep
5
comment Salt and password
reading which doc to set which password ?
Jul
21
comment What is a good analogy to explain to a layman why passwords should be hashed?
@NateKerkhofs could you point that site out?
Jul
18
comment Can someone please explain RBAC to me?
you're welcome :). You can even take it and put your own answer, I didn't do it because I'm in a hurry...
Jul
18
comment Can someone please explain RBAC to me?
merlot.usc.edu/cs530-s04/papers/Barkley97a.pdf
Jul
18
comment Can someone please explain RBAC to me?
en.wikipedia.org/wiki/Access_control_list#Comparing_with_RBAC
Jul
17
comment Girlfriend just sent Personal info over email
She wanted to send those documents, and sent them to the right person? Or she sent the wrong documents? Or to the wrong person (although not an unknown address) ? Or she is worried because she sent them using email without encryption? Where did she sent it from ?
Jul
17
comment How to memorise multiple xkcd-style passwords for particular services?
@SteveDL "correct horse battery staple envelope" for email, "rainbow sand pipe nose face" for facebook, "dark bug hole scream gates" for your microsoft account... where the last word isn't random, just associated with the service/site/program...
Jul
17
comment How to memorise multiple xkcd-style passwords for particular services?
@SteveDL and I can improve my answer, based on your comments, to address such understanding. thanks!
Jul
17
comment How to memorise multiple xkcd-style passwords for particular services?
@SteveDL ah, thought was a mistake, because of the "service name" phrase that I didn't use. Thanks for your comments: I assumed that the OP said he would use the "correct horse" method to generate N passwords, one for each site, as he said he would "memorize all of them". And that the problem was only to know which password was used at each site/program. So, having a strong password, adding one element to associate it with the site wouldn't decrease the security.
Jul
17
comment How to memorise multiple xkcd-style passwords for particular services?
@Steve ops, perhaps your comment was to the other answer, provided by tom leek ?
Jul
2
comment Is this a secure way of storing passwords?
@Cthulhu the way the OP proposes it, concatenating random characters (if really random, will include non-printable characters too) avoid the problems that the article tries to explain.
Jul
2
comment Is this a secure way of storing passwords?
@Cthulhu so the answer should have stated that. The way it is, it's wrong. Hashing many times is good if you add the salt (and the pepper, why not). The article is based on a wrong assumption: the 14-printable characters have LESS entropy than the 20 hex-characters hash.
Jul
1
comment Password protect an excel file for a period of time?
@MOTS If the file is really important, that would attract attention from people who really want it, consider it impossible. If you want to protect against a 5 year old boy who wants it, perhaps you can... :) It really depends on the resources of your enemy.
Jul
1
comment Password protect an excel file for a period of time?
it would be much harder than that. If someone is able to see a file, he is also able to take a photo or film it.
Jun
26
comment How to properly anonymize data, if hashing isn't enough?
@D.W. your edit was perfect.
May
6
comment Password protected zip opened in notepad
When did you create that .zip file? Did you use strong password or it was a time when you knew little and just used lowercase letters? If so, try bruteforcing it with some program like FZC. In modern computers, weak passwords are easily cracked.
Apr
24
comment What makes it illegal to use the information learned by exploiting a bug?
@myq depends on where you live.
Apr
15
comment I need two separate hidden volumes in disk encryption. What are my options?
@superuser :) take care when doing things "for fun" in security realms. You might end up without your data or without security...