Reputation
37,649
Next tag badge:
153/100 score
19/20 answers
Badges
14 88 160
Newest
 Nice Answer
Impact
~1.3m people reached

Mar
24
revised How reliable is a password strength checker?
fixed mathness
Mar
24
answered How reliable is a password strength checker?
Mar
23
comment Download Windows 7 security updates and patch offline
@Rory ah, but you're still talking about general usage scenarios. What about the specific use case - connected to the Internet, but no outgoing connections except to Windows Update?
Mar
23
comment Download Windows 7 security updates and patch offline
@Rory yes, it makes a huge difference - for regular web usage. But in this case he's talking about just updating windows - IMMO "passive" attacks would be mostly irrelevant (or nearly so, relatively speaking), whereas "active" attacks would be much more in his face - and those would be stopped more by a FW than patching (though I agree there are some cases where that is relevant too, if the FW is onbox and it is connected directly to the Internet).
Mar
22
comment AntiXSS for ASP.NET 1.1
That's what I was afraid of... Still hoping someone has/had an alternative that they can just use...
Mar
22
asked AntiXSS for ASP.NET 1.1
Mar
22
comment Encryption and the “security time decay” of prior encrypted data
@Rory I meant the term, and as trying to specify the length thereof. As opposed to just a general "it's not infallible and will eventually break"
Mar
22
comment Encryption and the “security time decay” of prior encrypted data
Interesting idea, I guess this is kind of a security "half-life" for crypto... I'm curious what will turn up here.
Mar
22
revised Encryption and the “security time decay” of prior encrypted data
edited tags
Mar
19
revised OpenSSO and Basic Auth together
edited tags
Mar
19
revised How to find out if a connection encrypted?
edited tags
Mar
19
revised Firewall rules to block unwanted protocols on given ports
edited tags
Mar
18
revised Is disabling auto-run enough to protect against malicious code from removable media automatically infecting a machine?
edited tags
Mar
18
comment What factors do you use to choose data loss prevention techniques to use, if any?
and dont forget OS support - many DLP products wind up not supporting some client OSs (notably OSX and Linux)
Mar
18
revised What factors do you use to choose data loss prevention techniques to use, if any?
edited tags
Mar
18
revised Anybody have additional information on the EMC RSA SecurID compromise?
edited tags
Mar
17
answered Are there any security measures that are resistant to a brute force attack?
Mar
17
comment Are there any security measures that are resistant to a brute force attack?
The original q on stackoverflow: stackoverflow.com/q/5336992/10080
Mar
17
revised How to apply FIPS to Microsoft Access database with custom VBA
edited tags
Mar
17
revised How can Network Disconnect be implemented for RDP on a Windows system (2003/XP or later)?
edited tags