793 reputation
7
bio website karolodesign.co.uk
location
age
visits member for 11 months
seen Apr 23 at 15:45

I develop for the web, in all sorts of languages, and for no good reason. I'm by no means a proper security expert, but in the current climate, I don't need to be. Even my basic understanding of systems with no kernel background etc. can worrying still recover a lot of data from supposedly secure systems.

All that said, I'm one of the more security conscious web developers - which is the problem with the web today.


Feb
10
comment Keeping TrueCrypt keyfiles in plain sight
Well, yeah, I guess, but you can always keep a backup somewhere too.
Feb
7
comment How to detect bots clicking a link?
Ah well, in that case it's more one for the server admin bods. Sorry I can't help further
Feb
7
answered How to detect bots clicking a link?
Feb
7
comment Why do GUI terminals allow the pasting of control characters?
No particular comment on why they do, but just wanted to add that some editors will display control characters with their own glyph, to alert the fact that they are there.
Feb
3
comment Potential damage of someone getting your online banking password
I'd say so, yes. I wouldn't do it
Jan
31
comment Does two-factor authentication reduce the need for a long password?
Assuming that you're right about how much time 2FA adds, can you plausibly save the same amount of time by simplifying a password? I expect even if you can make you password a five letter word, it wouldn't save much more than a couple of seconds. Overall it doesn't seem like 2FA is really causing a problem, even if you use it multiple times daily.
Jan
30
comment Why is no cloud allowed in this brief?
Don't want their product running in a shared memory space?
Jan
30
comment Does two-factor authentication reduce the need for a long password?
I think the best way I could view this alleged logic is that 2FA will help improve situations in a world where users use crap passwords. It would still be better if they used good ones.
Jan
30
comment Does two-factor authentication reduce the need for a long password?
The time went up a lot? I don't follow. It maybe takes me 3-5 seconds longer to login to a 2FA protected account. Unless I've missed you meaning, I think I disagree.
Jan
29
comment Keeping TrueCrypt keyfiles in plain sight
Also a good point - don't use system or program files as keyfiles. A friend of mine used a DLL he found in his program files, and when that program auto-updated, he lost access to his archive until he was able to source an older version!
Jan
29
answered Does two-factor authentication reduce the need for a long password?
Jan
28
answered Keeping TrueCrypt keyfiles in plain sight
Jan
27
answered Potential damage of someone getting your online banking password
Jan
27
answered Can be WiFi credentials obtained by autoconnection feature + a mimicking hotspot?
Jan
27
comment What kind of virus attack is this? And what do I do now?
Yeah, mostly so would I, but this is obviously a balance of time and cost vs benefit
Jan
24
comment Why are Windows computers open to network file access by default?
Ah well, in that case I turn out to have been misinformed.
Jan
24
answered Why are Windows computers open to network file access by default?
Jan
24
comment Cryptography behind chip based credit cards (smart cards)?
I didn't spot your bit about the similar questions - a main reason why answers don't explain what the working of a protocol are is that there's more than a single system in place, and different providers will use different approaches.
Jan
24
comment Has there been any documented cases where hackers have hijacked the phone number to a business?
Kevin Mitnick diverted calls made to a telecoms company employee to himself to allow him to authorise his own access to their system. It's 'documented' in Ghost in the Wires, although that is hardly a referenced work. I'd guess that that is hardly a rare attack either.
Jan
24
comment Cryptography behind chip based credit cards (smart cards)?
There are at least 2 other questions about this that may help you, and some go into quite some depth. Search the site for 'EMV' or 'Smartcard' and you should find things.